A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private data.

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

Researchers warn malicious GitHub repositories can trick AI coding agents into running hidden malware through trusted setup steps, risking developer systems and credentials. Google - Gemini A newly ...

Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.

Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding agents into running arbitrary code on developer machines. Called ...

Cybersecurity researchers from Tenet Security revealed in June 2026 a novel attack vector that manipulates trusted AI coding assistants, a technique they’ve dubbed Agentjacking. This method allows an ...

Researchers have revealed what they claim to be a “new class of attack” which tricks AI coding agents into executing arbitrary code on developer machines. Tenet Security, which specializes in the ...

Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be driven to run attacker-controlled code or hand over sensitive data ...

The fight between OpenAI and Anthropic for control of AI-assisted coding has turned into open commercial warfare. OpenAI is offering enterprises two months of free Codex usage to switch off rival ...