TypoPrompting exploits mistyped AI website addresses to redirect users to fake pages that deliver malware and browser ...

A watering hole attack poisons trusted sites to hit a chosen group. Learn how it works, the APT29 phone case, and practical ...

In November 2026, the Windows PC launcher for the popular game 'Goddess of Victory: NIKKE' was tampered with by a third party, leading to an attack that sent malware to users' PCs.What is particularly ...

APT29 used poisoned websites to attack unpatched iPhones and Android phones, stealing cookies, Wi-Fi passwords and device ...

Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service.

To use AI agents safely, it is important to manage three things: 'where you run them,' 'what you let them read,' and 'how much control you grant them.' With tools like Claude Code and Codex, even ...

Developers installing Claude Code through Cursor’s extension marketplace were offered tampered packages designed to collect information about their computers and give attackers remote access. Cursor ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Static analysis of a PDF email attachment using pdfid and pdf-parser to identify JavaScript, inspect OpenAction entries, and practice basic SOC investigation techniques. - ...

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...