GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

Anthropic accidentally exposed over half a million lines of its Claude Code, triggering a rapid global effort to copy and port the AI coding system.

A malicious GitHub repository published by idbzoomh uses the Claude Code exposure as a lure to trick people into downloading ...

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

Discover the implications of the Claude code leak, revealing the inner mechanics of Anthropic's AI system, including self-healing memory and undercover mode.

Nearly 2,000 internal files were briefly leaked after ‘human error’, raising fresh security questions at the AI company ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute malware via a compromised account. Attackers exploited a hijacked account on npm ...

AI firm Anthropic accidentally leaked its Claude Code source code via an npm package, revealing unreleased features like an ...