Cybersecurity

A new cyber-espionage campaign, UAT-10027, is actively targeting U.S. education and healthcare organizations.The attackers deploy a previously unseen backdoor called Dohdoor, which uses DNS-over-HTTPS...

A malicious package named StripeApi.Net was discovered on the NuGet Gallery impersonating the official Stripe.net library.The typosquatted package was designed to secretly exfiltrate sensitive...

Researchers at Check Point disclosed critical vulnerabilities in Anthropic's Claude Code AI assistant.The flaws, including CVE-2025-59536 and CVE-2026-21852, could allow remote code execution and...

NuGet campaign exfiltrated ASP.NET Identity data and created backdoors after amassing over 4,500 downloads.Separately, a malicious npm package, ambar-src, was downloaded over 50,000 times...

Former L3Harris manager Peter Williams sentenced to over seven years for stealing eight zero-day exploits and selling them to a Russian broker.The exploits, sold...

Anthropic identified three Chinese AI firms using over 24,000 fraudulent accounts for industrial-scale "distillation attacks" on its Claude model.The illicit campaigns generated over 16...

The Iranian state-sponsored hacking group MuddyWater has launched a new campaign called Operation Olalampo, deploying multiple new malware families.The group utilized AI-assisted development tools...

Anthropic has launched Claude Code Security, a new AI feature for scanning codebases and suggesting vulnerability patches.The capability is currently available in a limited...