Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in ...

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Project Mirage has unveiled Dune, a three-button MacBook accessory that offers context-aware shortcuts, AI-powered automation ...

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...

Cyber security careers are expanding as India faces rising cyber threats, creating opportunities for students in Nagaland.

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.

Chatbots now place orders, code assistants push updates, and autonomous agents comb production databases while you sleep.

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

One button now lets me disconnect whenever I want.