Any net-connected vehicle from two automakers could be remotely opened and started — now-patched failures with API backend ...

Grab an illustration of a car and move it onto an illustration of a parking lot. When you let go, the car changes its ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Previously, I wrote a note titled "The story of how I, someone who cannot write code, started making an app on my iPhone ...

Hackers are using fake AI websites to push Net Guard, a Microsoft Store-signed application that researchers classified as ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts.

Claude Code vulnerability could let malicious HTML steal SSH keys and tokens via its preview pane. See which risks developers face ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it.

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

A newly identified Falcon, also tracked as XG or Xiàng Gē. It is a NodeJS-based command-and-control (C2) framework that takes over victim browsers by running malicious JavaScript.

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to ...