A 450-task benchmark built from real CVEs shows even the best AI coding agent writes code that's both working and secure only ...

A watering hole attack poisons trusted sites to hit a chosen group. Learn how it works, the APT29 phone case, and practical ...

In November 2026, the Windows PC launcher for the popular game 'Goddess of Victory: NIKKE' was tampered with by a third party ...

APT29 used poisoned websites to attack unpatched iPhones and Android phones, stealing cookies, Wi-Fi passwords and device ...

Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service.

A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting ...

Developers installing Claude Code through Cursor’s extension marketplace were offered tampered packages designed to collect information about their computers and give attackers remote access. Cursor ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Static analysis of a PDF email attachment using pdfid and pdf-parser to identify JavaScript, inspect OpenAction entries, and ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...