Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

Nextcloud exposed 367K records including employee data, client contracts, and infrastructure scripts through a misconfigured ...

Omp (oh-my-pi) is a batteries-included terminal coding agent with LSP, debugger, subagents and hash-anchored edits. Here's ...

Kimi 最近把 Agent 从 Python 转成了 Typescipt 和 pi-tui 的 kimi-code 新的 Agent，这个蛮有意思的，为什么 Kimi 要这么做。是跟着 Claude code 的步伐吗？ 让我们看一下 Kimi-code 的结构变化 维度旧版 kimi-cli新版 kimi-code语言Python ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.

Hermes Agent makes it easy to run an AI coding agent in its own container.

SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for ...

AI agents such as OpenClaw are turning developer workstations into always-on edge servers. We test whether the Dell Pro Max ...

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...