The Hacker News

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...
Infosecurity Magazine

Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...
The Hacker News

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

CrashStealer uses a notarized macOS dropper to pass Gatekeeper, then steals browser, wallet, password manager, file, and ...
Developer Tech

Developers face RCE via Claude Code ‘auto-mode’ exploit

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...
Tech Times

GitHub Copilot App Now Scans In-Flight Code for Vulnerabilities Before Commit

GitHub Copilot security review launched in the desktop app July 14, giving all subscribers — Free tier included — AI-driven ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

RedHook Android malware now uses Wireless ADB for shell access

A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to ...

C'mon, just copy this text string and paste it into your macOS Terminal – it'll fix your computer, honest

Threat intel outfit Group-IB has detailed a previously undocumented macOS information stealer that doesn't bother hunting for ...

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...
Tech Times

Claude Code Removes Enterprise Opt-In: Auto Mode Now Default on Major Cloud Platforms

Claude Code auto mode enterprise governance changed Friday: v2.1.207 removes the opt-in flag for Amazon Bedrock, Google ...
Infosecurity Magazine

Modular macOS Stealer Uses Kill Loops to Force Password Entry

A new macOS stealer has been observed pairing the paste-a-command social engineering of a ClickFix lure with a coercion ...

TestMu AI Introduces API Calling in Kane CLI, Enabling Test Flows to Validate Applications Against Live Backend Data

TestMu AI (formerly LambdaTest), the world's first Agentic AI-powered Quality Engineering platform, today announcedAPI calling support in Kane CLI, enabling test flows to call APIs, store their ...