JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, ...

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude ...

Google researchers published a new paper detailing a new way to catch spammers who are using generative AI to flood Google’s platform with spam and overwhelm its quality filters. While the research is ...

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code ...

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Google began rolling out the June 2026 spam update, applying globally and to all languages. It's the second spam update of 2026, and Google announced no new spam policies with it. Ranking or traffic ...

It only took about two days - the Google June 2026 spam update is now done rolling out. It started on Wednesday, June 24, 2026 at around noon and completed on June 26, 2026 at around 2pm ET. This ...

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...