Tracked topic
Claude is an AI assistant developed by Anthropic that uses large language models to generate text and support conversational tasks.
… The attacker uses a malicious Claude Artifact hosted on Claude’s legitimate domain, which is a common tactic that has been used The attackers used a malicious Claude Artifact hosted on Claude’s legitimate domain, a tactic that has been used at the beginning of the year to push macOS malware via Cli… …
… One Docker socket finding hit Codex, Cursor and Gemini CLI at once. …
… An analysis of the JavaScript payload revealed that it targeted a broad range of developer secrets that included the following: GitHub tokens and GitHub Actions secrets npm, PyPI, RubyGems, JFrog publishing tokens AWS, GCP, Azure, Kubernetes, and Vault credentials SSH keys Docker credentials .env, … …
… In Island’s tests, ChatGPT, Gemini, and Claude surfaced various malicious repositories when prompted with related tasks, and sometimes relayed the installation instructions. …
… Local configuration files, authentication tokens, session data, and Model Context Protocol MCP configuration for AI coding assistants Claude, Gemini, Codex, Cline, OpenCode, and Kilo . …
… After gaining access and searching for cloud credentials, API tokens, and reachable internal services, the threat actor discovered an exposed Docker socket that provided root-level control. …