Archive.today under fire, again ...

Orca has discovered a supply chain attack that abuses GitHub Issue to take over Copilot when launching a Codespace from that ...

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...

Critical vulnerabilities in four widely used VS Code extensions could enable file theft and remote code execution across 125M ...

Modern PDF platforms can now function as full attack gateways rather than passive document viewers.

The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...

Background In March 2025, cybersecurity researchers disclosed a highly sophisticated targeted attack campaign named “Operation ForumTroll.” Orchestrated by an unidentified state-sponsored APT group, ...

A newly disclosed security issue in the popular jsPDF library has raised serious concerns for web developers. The flaw could ...

Anthropic has launched Claude Code Security, an AI vulnerability scanner that found 500+ undetected bugs, plus desktop automation and GitHub PR auto-merge.

Vulnerabilities in PDF platforms from Foxit and Apryse could have been exploited for account takeover, data exfiltration, and other attacks.

The most powerful thing that Australians have done, though, is simply to carry on. The purpose of attacks like the one on Dec. 14 in Sydney – if purpose is the right word for such an act – is to sow ...

Is that CAPTCHA you just encountered real? Find out how fake CAPTCHAs are installing hidden malware and how to stay safe.