The new feature in Telegram allows users to directly use interactive applications within chats, but it also introduces security risks. SlowMist founder Yu ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access tokens.

Claude Code vulnerability could let malicious HTML steal SSH keys and tokens via its preview pane. See which risks developers face ...

On Nov. 4, the Cybersecurity and Infrastructure Security Agency added CVE-2024-27834 to its Known Exploited Vulnerabilities ...

Polymarket briefly halted trading after a compromised third-party script, which researchers tied to DebugBear, drained user ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

In November 2026, the Windows PC launcher for the popular game 'Goddess of Victory: NIKKE' was tampered with by a third party ...