Anthropic’s Claude Code sessions automatically establish reverse SSH tunnels and install LaunchAgent persistence mechanisms on macOS systems without explicit user consent. While designed for legitimate remote development functionality, these behaviors create security concerns including unauthorized
Threat actors have deployed malicious Visual Studio Code extensions disguised as legitimate Solidity development tools to steal cryptocurrency wallets, API keys, and developer credentials. The “Solidity Pro” extension and related variants were available on the official VS Code Marketplace, targeting
A sophisticated supply chain attack targeting BdThemes WordPress products has compromised thousands of websites through a poisoned API response mechanism. Attackers injected malicious code into the legitimate update distribution system, deploying backdoors disguised as theme templates. The breach af
A critical zero-day vulnerability in Metabase, a popular open-source business intelligence platform, is being actively exploited in the wild to gain unauthorized administrative access. Attackers are leveraging this flaw to bypass authentication mechanisms and execute arbitrary commands on vulnerable
Security researchers have uncovered a novel attack technique called “CSS Bomb” that weaponizes Cascading Style Sheets (CSS) to transform malicious emails into real-time keyloggers. When victims open these specially crafted emails in web-based email clients, the embedded CSS code captures every keyst
Ransomware operators are shifting their social engineering tactics, deliberately bypassing C-suite executives to target mid-level IT managers and system administrators. These attacks exploit the technical access privileges of IT staff while capitalizing on their often-lower security awareness compar
Cybercriminals successfully compromised TrueConf’s distribution infrastructure, injecting malicious backdoors into legitimate client installers. Users downloading the video conferencing software between specific dates received trojanized versions that established persistent remote access for attacke
A critical zero-day vulnerability in Metabase, an open-source business intelligence platform, is being actively exploited in the wild. The flaw, assigned a maximum CVSS score of 10.0, allows unauthenticated attackers to gain administrative access and extract sensitive data from affected instances. O
A critical prompt injection vulnerability in Atlassian Rovo’s AI agent allows attackers to manipulate the system into exfiltrating sensitive data from Jira and Confluence instances. By crafting malicious prompts embedded in tickets or documents, threat actors can bypass access controls and extract c
A critical zero-day vulnerability (CVE-2025-2589) in Metabase open-source business intelligence software has been actively exploited in the wild, achieving a maximum CVSS score of 10.0. The flaw allows unauthenticated attackers to execute arbitrary SQL queries and gain administrative access through