News that matters, without the noise.

Anthropic Warns Claude Users of Infostealer Malware Infections

The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX’s artificial intelligence (AI)-powered coding assistant

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a

RHSA-2026:61376: Important: nodejs22 security update

An update for nodejs22 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has

Popular npm Package With 150K+ Weekly Downloads Hit by Credential-Stealing Supply-Chain Worm

A widely used npm package has become a credential-stealing delivery channel after attackers planted a self-spreading Shai-Hulud payload

Hackers Use Ethereum Blockchain to Steal Credit Card Data From Online Shoppers

Online shoppers can have their card details stolen without ever leaving a legitimate store. A tracked Magecart campaign

Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs

Named KindaRails2Shell, the arbitrary file read flaw allows attackers to extract secrets and execute arbitrary code remotely. The

How AI Is Changing Code Reviews & Software Development

AI Has Made Everything Worse | Hany Farid on the Internet’s Truth Problem

What happens when a relentless, low-cost microcontroller meets Android’s lock screen security?

Hiding Prompt Injection in Legal Filing

Someone hid AI instructions into a legal filing. Alternate link.