Mozilla researchers demonstrate Claude Code vulnerability using hidden DNS records

Agentic coding tools vulnerable to command execution via DNS records ...

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
SecurityWeek

‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

The BioShocking technique exploits AI browser reasoning, showing how easily attackers can subvert safety guardrails with ...
GitHub

EXM Tweaks v2.1.1 — Full Reverse Engineering Analysis

Scope: Full static analysis of the installer, Electron app, embedded binaries, encrypted/obfuscated JS, kernel drivers, API backend, and Windows service. ⚠️ PRIVACY NOTICE: This repository contains a ...