The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

StegoAd Microsoft Edge extensions malware affected up to 2.6 million users after the company removed 119 add-ons that hid ...

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...

Fake Perplexity Chrome extension exploited a legal permission combination to log every address-bar keystroke before ...

Microsoft disrupted StegoAd, a malicious browser extension campaign affecting up to 2.6 million users. StegoAd used hidden payloads, delayed execution and steganography to evade browser security ...

Trusted developer tools are becoming the new path into enterprise software environments.

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...

Google's Gemini AI can enhance your web working experience for the ultimate productivity upgrade. Reading about the ...

Twenty percent of eligible purchases during the event will help fund Extension education and outreach efforts.

Z.ai has launched ZCode, a free AI coding tool powered by GLM-5.2 that challenges Cursor, Claude Code and GitHub Copilot ...

Cursor's new iOS app lets developers launch and manage independent coding agents from their phone, as AI-powered development moves beyond the desktop.

Researchers tested seven popular AI browsers and found four vulnerable to attacks that trick the AI agent into handing over ...