Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Roblox has pulled back the curtain on a selection of six new 18+ games, including Drifters, an extraction shooter developed by Bungie co-founder Alexander Seropian. Roblox Studio unveiled the new ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

Island found dormant JavaScript injection paths in Adblock for YouTube, a Chrome extension with 10M+ installs, raising ...

GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat ...

Humanity Protocol said the exploit that hit its H token late Monday was caused by a compromised developer machine that exposed several private keys tied to the project’s token and bridge ...

Bucks County District Attorney Joe Khan, saying parents are “outmatched” by social media companies in the fight for the online safety of their children, has filed a federal lawsuit against the makers ...

[UPDATE 04.06.2026 – 23:33 CEST] Microsoft says the issue was mitigated for its services on June 3, 2026, and that no customer action is required; this article has been updated to reflect the current ...

A github.dev flaw could let attackers steal GitHub OAuth tokens through a one-click attack, exposing private repositories and codebases. A single click on the wrong repository could have put a ...

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...