A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

CISA adds Apple CVE-2024-27834 to its KEV catalog after reports of active exploitation involving a pointer authentication bypass.

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...

Hackers from North Korea are notoriously effective at stealing crypto, with one estimate attributing 60% of all losses last ...

Polymarket briefly halted trading after a compromised third-party script, which researchers tied to DebugBear, drained user ...

Concerns are growing among game fans following analysis indicating that launching the 'Goddess of Victory: Nikke' PC launcher ...

A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...