AI-related SOC alerts rose 685% from February to June 2026, with 94.1% classified as noise and 5.8% as genuine security risks ...

At the end of my last post, I promised to write about how much permission—read, edit, execute, or write—I give to my Coding Agent. Before I wrote that, I decided to count exactly what permissions I ...

Claude Code Auto Mode security exploit: Johann Rehberger's Python module-shadowing attack achieves remote code execution 60-80 percent of the time against a feature Anthropic marketed with a 0.00 ...

When entrusting commercial code to Claude Code or Codex, conversation logs alone cannot prove 'what was actually done.' This is because Shell, child processes, network, and file writes occur at a ...

Microsoft says TerminalFix uses fake Cloudflare CAPTCHAs to trigger PowerShell and deploy a reverse-tunnel backdoor for internal network access.

A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen.

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into running malicious PowerShell commands in Windows Terminal.

BleachBit 6.0.4 release fixes secure file wiping on Windows that skipped clusters and left fragmented files partly ...

IntroductionIn June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being ...

In a technical write-up published on September 11, Sysdig's Threat Research Team said the operator exploited CVE-2026-39987, ...

Learn how TrustSink abuses rogue Entra external authentication providers to capture passwords and why removing the provider ...

Cisco says a nation-state actor and a Qilin ransomware operator are actively exploiting two Secure Firewall Management Center ...