An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Google research shows why AI-generated spam is becoming harder to catch and why content-level quality filters may no longer be enough. Google researchers published a new paper detailing a new way to ...

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...

Cornell Tech researchers found that a 13-word Reddit comment can cause ChatGPT and Gemini to recommend fake products, ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

Z.ai pitches GLM-5.2 for long-running software engineering tasks The open-source model combines a one-million-token context window with architectural updates aimed at lowering the cost of ...

I spent months applying to jobs the hard way. So I engineered the system I wish I had. Companies use AI to filter candidates. I just gave candidates AI to choose companies. Important: This is NOT a ...

A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence (OSINT) is intelligence collected from publicly available sources. In the intelligence ...

Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading ...