Claude Code vulnerability could let malicious HTML steal SSH keys and tokens via its preview pane. See which risks developers ...

GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary ...

GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.

Citizen Lab uncovers AdFection, a zero-click spyware attack using targeted ads to infect devices, exposing major flaws in the ...

From analyzing public apps to direct attacks on servers. We will organize the issues that also apply to web services without ...

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click ...

Security research team Noma Labs, part of Noma Security, the world's leading agentic security solution, today released details of SneakPeek, an exploit chain discovered in Anthropic's Claude Code ...

Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and private ...

Reflectiz's AI agent bypassed an insurer's live login by directing a one-time code to its own inbox during an authorized ...

AdFection: Citizen Lab says Discover-Tech used targeted ads to deliver Candiru zero-click spyware to Al Jazeera devices.

The tool's HTML preview mechanism had a flaw allowing malicious JavaScript to access local files and exfiltrate cloud ...