Attackers can exploit how AI bots hallucinate software URLs to create massive botnets. The vulnerability is endemic to every ...

With the ability to take control of distributed devices at scale, HalluSquatting has the potential to achieve various ...

Agentic coding tools vulnerable to command execution via DNS records ...

Mozilla 0DIN’s Claude Code demo shows how clean GitHub repos can expose AI coding agents to prompt injection, reverse shells, ...

Anthropic’s AI coding agent silently encoded proxy hostnames and Chinese timezone data into invisible Unicode characters ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Researchers found a way to trick AI coding assistants like Claude into running malware hidden in GitHub repositories. Here's what it means for Ghanaian developers adopting these tools.

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a CVE, a verify command, and a fix.

A reverse shell gives an attacker interactive command-line access to a compromised machine by making the target reach out first. Instead of the attacker connecting inward to a listening port on the ...

AI agents have fundamentally changed the threat model of AI model-based applications. By equipping these models with plugins (also called tools), your agents no longer just generate text; they now ...