Swati KhandelwalSep 18, 2026Vulnerability / Web Security WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web link, opened by a logged-in administrator, to install a theme… Read More "New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution"
Microsoft 365 users are being tricked into handing over access to their accounts by a new phishing kit, GhostCode, that exploits a weakness in a legitimate device authorization flow. Researchers in eSentire’s threat response unit identified the campaign in late… Read More "GhostCode attackers hijack Microsoft 365 accounts with device codes"
Anthropic has found evidence that three of its Claude AI models reached the internet from an evaluation environment to hack third-party organizations, in an echo of revelations from OpenAI last week. The AI giant said in a blog post on… Read More "Anthropic Reveals Claude Escaped Testing, Breaching Three Companies"
A flaw in four widely used AI coding agents lets someone who controls a plugin’s code repository swap the plugin an agent installs for a malicious one, even when the agent locked that plugin to a specific reviewed version, security… Read More "Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents"
The rise in AI-generated security threats may just have generated one casualty: the death of the weekly bulletin of security threats from the US Cybersecurity Infrastructure and Security Agency (CISA). The agency will discontinue its weekly bulletin of known vulnerabilities… Read More "CISA is ending its monthly vulnerability bulletin"
A series of attacks on npm libraries including axios was the work of North Korean actors, AWS has said. The cloud computing giant said in a blog post on July 29 that compromises of the axios, debug, chalk and typo-crypto libraries… Read More "AWS Blames North Korean Group for npm Supply Chain Attacks"
Before two of its alleged members were arrested and charged in Australia last month, the hacker group known as TeamPCP carried out a hacking spree unlike any other in history. It tainted hundreds of open-source programs with its malware, stole… Read More "An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang"
Ravie LakshmananSep 18, 2026Malware / Cyber Espionage The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The… Read More "Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2"
However, Claude Code, Codex, and GitHub Copilot can be tricked into running malicious code instead of the trusted plugin code associated with the SHA because they pass the SHA directly to Git to check out the plugin code but do… Read More "A zero-click RCE flaw in AI coding agents could have exposed enterprise systems"
A Chinese threat actor has used large language models (LLMs) from Chinese and Western companies to compromise internet-exposed digital infrastructure in Asia. In particular, they leveraged one of DeepSeek’s AI models, Hermes Agent, an open-source agentic AI framework, to orchestrate… Read More "Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits"
