Anthropic Removes Hidden Data Marker from Claude Code After Researcher Discovery
An independent researcher discovered a function in Claude Code's JavaScript bundle that covertly encoded user time zone data, prompting Anthropic to remove the feature and call it an experiment.
The Latest
Windows 11 26H2 to Activate Enterprise Backup Setting by Default
Microsoft will enable its Windows settings backup tool by default on eligible enterprise devices starting with Windows 11 version 26H2,…
Device Code Flow Exploit Lets Attackers Hijack Microsoft Accounts via Real Login Page
Attackers are exploiting Microsoft's Device Authorization Grant feature to steal account tokens without using a fake login page, bypassing traditional…
QuimaRAT Cross-Platform Trojan Offers Extensive Modular Attack Toolset
The Java-based trojan uses a modular architecture with encrypted plugins that can be dynamically loaded and updated from its command-and-control…
PHP Runtime Flaws Open Door to Service Disruption Attacks
Two newly disclosed PHP vulnerabilities enable attackers to crash web services through TLS handling errors and memory corruption in the…
Coordinated Takedown Cuts NetNut Botnet Infrastructure
Law enforcement and industry partners seized domains and disabled backend infrastructure used by the NetNut residential proxy botnet, cutting off…
New Cavern Malware Framework Targets Israeli IT and Government Networks
Iranian state hackers are using a modular C2 framework called Cavern to infiltrate Israeli organizations through compromised IT supply chains.
RustDuck Botnet’s Rust Overhaul Targets Routers and Servers for DDoS Attacks
The RustDuck botnet uses a two-stage infection chain and sophisticated evasion techniques to hijack routers and servers for DDoS attacks,…
MCP Config File in Amazon Q Developer Opens Path to Credential Theft
A repository-carried config file in Amazon Q Developer could execute commands with a developer's live cloud session, but a patch…
WhatsApp Username Feature Carries Privacy Risks Experts Warn
Consumer advocates warn that reusing Instagram or Facebook usernames on WhatsApp can link identities across Meta's platforms and increase social…
OpenSSH 10.4 Patches Memory Exhaustion and Host Key Flaw
The new release closes a remote memory exhaustion attack vector and adds experimental post quantum signature support while breaking some automation scripts with configuration output changes.
FIFA World Cup Phishing Chain Uses Auth Bypass and Geo Cloaking to Steal Card Data
Unit42 discovered a layered phishing chain that uses authentication passing emails and geo cloaked redirectors to steal personal and payment…
Pure Data Theft Extortion Costs US Government Entity $1 Million Payout
A small US county paid a $1 million ransom in Bitcoin to prevent the leak of stolen data, marking a…
Optimized Performance and Streamlined Tool Access Define New Parrot OS Release
The update shifts focus from expanding the toolset to refining system performance and usability for penetration testing workflows.
Spotlight
Fake Clipboard Manager Targets macOS Users with Stealthy Data Theft
PamStealer uses a Rust based binary and native macOS APIs to evade detection while stealing passwords, clipboard data, and browser credentials.
Linux Kernel Bug Grants Root Privileges on Servers and Android Phones
The CVE-2026-46242 kernel flaw exploits a race condition and use-after-free in the epoll subsystem, affecting everything from cloud servers to Android smartphones.
New Malware Technique Hides Inside AI Coding Assistant Plugins
Researchers found that modified malware placed inside AI coding assistant plugins bypassed eight major security scanners more than 80 percent of the time.
TrojPix Exfiltrates Data from Air-Gapped Machines via Video Cable Emissions
A novel exfiltration method leverages imperceptible pixel modulation in video cables to transmit data via radio emissions, achieving speeds far beyond typical air-gap covert channels.
Features
Opera GX Browser Mod Exploit Steals User Data via Silent CSS Injection
The vulnerability allowed attackers to silently install malicious browser mods that used CSS injection to reconstruct user email addresses from…
Fake OpenAI Organization Invitations Used to Steal Corporate Data
Attackers exploit OpenAI's organization invite system to create poisoned tenants that harvest sensitive prompts, API activity, and corporate data from…
Japanese Police Arrest Teenager For AI-Assisted Attack On Anime Streaming Platform
A 15-year-old Japanese student used a ChatGPT-assisted program to cancel over 46,800 accounts on Bandai Channel, forcing a month-long service…
Singapore Land Authority Data Breach Exposes 70,000 Records After IBM Testing Environment Compromised
Singapore Land Authority says 70,000 individuals' data including NRIC numbers and property addresses exposed after an IBM-managed testing environment for…
Palo Alto Networks and Koi Security Face Lawsuit Over AI-Hallucinated Cyber Threat Report
MeetingTV sues Palo Alto Networks and Koi Security over cybersecurity report that allegedly used AI hallucinations to falsely link the…
Russian State Hackers Evolve Signal Phishing to Steal Backup Recovery Keys
Russian state hackers have updated their Signal phishing campaign to steal Backup Recovery Keys, granting persistent access to encrypted message…
