Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign dubbed GhostPairing. This type of attack does not require any authentication ...

Commercial robots are far more vulnerable to hacking than many users realise, with cybersecurity experts warning that some machines can be taken over in minutes. Now, Chinese developers have ...

Hackers have figured out how to hijack WhatsApp accounts without cracking the messaging app's encryption, security researchers have warned. The so-called GhostPairing scam takes advantage of ...

Researchers have revealed what they claim to be a “new class of attack” which tricks AI coding agents into executing arbitrary code on developer machines. Tenet Security, which specializes in the ...

Among the numerous cyber threats that enterprises must contend with, domain-based attacks hold a prominent position. These are attacks that target or exploit domain names or DNS infrastructure.

Aerodrome Finance, a decentralized exchange on Coinbase's Base network, was targeted in a front-end attack, with attackers using DNS hijacking to reroute users to phishing sites. The attack did not ...

Hackers have figured out how to hijack WhatsApp accounts without cracking the messaging app’s encryption, security researchers have warned. The so-called GhostPairing scam takes advantage of ...