Tracked topic
Claude is an AI assistant developed by Anthropic that uses large language models to generate text and support conversational tasks.
…Executes a credential-stealer The researchers found that the malicious releases introduced a malicious file named 'src/helpers.php', which was automatically loaded by Composer. The injected code acted as a dropper…
…11, Apple Safari, Cursor, Red Hat Enterprise Linux for Workstations, LM Studio, OpenAI Codex, LiteLLM, Anthropic Claude Code, and Mozilla Firefox. Security researchers targeting fully patched products in the web browser, virtualization…
…If this is not possible, the manual cleaning process should be thorough because "attackers can reinstall removed code through the backdoor if any component remains active." The Validation Gap: Automated Pentesting Answers…
…The actor had also configured other AI coding platforms, including Qwen, GLM, Kimi, MiniMax, Claude Code, and OpenAI's Codex, but Unit 42 found that they were not used often. Hermes used…
…Once an infection occurs, the malware writes itself into Claude Code hooks and VS Code auto-run tasks, so uninstalling the malicious packages does not remove it. The self-propagation mechanism remains…
…Security researchers say the malware also established persistence on developer systems by modifying Claude Code hooks and VS Code auto-run tasks, enabling it to survive package removal. The malware spread to…
…At 10:31 AM EDT, GitHub confirmed that Copilot was also experiencing degraded availability, expanding the outage to its AI coding services. Git Operations, Packages, Pages, and Codespaces are currently listed as…
…Windows Task Host flaw now exploited by ransomware gangs Anthropic confirms Claude is down in major outage affecting multiple services How Anthropic plans to watermark Claude's AI-generated text Actively Exploited…
…In many cases, impacted users are unable to recover access due to the platform's use of automated assistance that involves only AI/chatbot loops and no human support agents. On Monday…
…New stealthy Quasar Linux malware targets software developers New GopherWhisper APT group abuses Outlook, Slack, Discord for comms JDownloader site hacked to replace installers with Python RAT malware Fake Claude AI website…