A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
Blockaid flagged Step Drainer across 12 DeFi sites as Flap confirmed a DNS hijack and StonkFun restored its website after ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
Multi-agent AI systems lose performance not because agents are weak, but because information evaporates at each handoff. NUS ...
Polymarket has promised to refund traders after a breach involving a website supplier. Some users reported that their ...
Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...
The Coruna iOS exploit kit now ships with a DarkSword iOS 18 chain on 608 domains. zLabs breaks down its delivery, native ...
Orange Tsai built a complete Microsoft Edge exploit chain using only logic bugs—no memory corruption, no AI—to win the Pwnie ...
Microsoft Edge exploit chain combines five bugs and two Windows features to bypass the browser sandbox and execute code .
ESET APT report 2026 reveals Belarus-aligned hackers conducted the first-ever destructive cyberattack by a Belarus-linked ...
Microsoft Edge logic flaws enabled universal XSS, sandbox escape, and code execution without memory corruption in a patched Pwn2Own exploit.
Three malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget wallets were caught stealing recovery phrases ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results