An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Looking for a new pair of running shoes and have Saucony in mind? You’re in the right place. Whether you're looking for a daily trainer to tackle the majority of your miles or a race day shoe to ...

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...