A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

Hackers infected 953 online stores with JavaScript loaders hidden in Magento CMS blocks, using bot filtering to evade ...

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access ...

GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary code on affected servers without logging in.

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...

Polymarket briefly halted trading after a compromised third-party script, which researchers tied to DebugBear, drained user ...

Concerns are growing among game fans following analysis indicating that launching the 'Goddess of Victory: Nikke' PC launcher ...

Claude Code vulnerability could let malicious HTML steal SSH keys and tokens via its preview pane. See which risks developers face ...

A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...