Daxin Rootkit Resurfaces in Taiwan Alongside Novel Stupig Pre-Logon Backdoor
An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm,…
Tag: Claude Code
Agent Data Injection (ADI) Attack: How AI Agents Can Be Tricked Into Misclicking or Running Attacker Commands
A new class of attack called Agent Data Injection (ADI) has been disclosed by researchers from Seoul National University, the University of…
Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Researchers at Manifold Security have disclosed two vulnerabilities in the Claude for Chrome browser extension that could allow rogue extensions to trigger…
Friendly Fire Attack: AI Coding Agents Tricked Into Running Malicious Code
Researchers at the AI Now Institute have published a proof-of-concept attack called 'Friendly Fire' that exploits AI coding agents designed to catch…
CVE-2026-39861: Symlink Flaw in Claude Code Sandbox
A symlink flaw in Claude Code's sandbox allows escape from containment, potentially enabling code execution on the host. This vulnerability was referenced…
GhostApproval Symlink Flaws Let Malicious Repos Execute Code in AI Coding Assistants
Security researchers at Wiz have identified a critical vulnerability pattern, dubbed GhostApproval, affecting six popular AI coding assistants. The flaw allows a…
AI Coding Agents Trigger Endpoint Security Rules Designed for Human Attackers
Sophos has identified that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are triggering endpoint security rules originally designed…
SkillCloak Technique Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing
Researchers at the Hong Kong University of Science and Technology have developed a technique called SkillCloak that allows malicious AI agent skills…
AI Agent JADEPUFFER Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls
Anthropic has restored its Claude Fable 5 AI model worldwide after the U.S. Commerce Department lifted export controls imposed on June 12,…