A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, Grokmanifold.security·2 pts·axsharma·7
ClawHub's 23 plugins squat the official @openclaw and @clawhub scopesmanifold.security·1 pts·axsharma·0
30 ClawHub Skills Are Quietly Recruiting Your AI Agent into a Crypto Swarmmanifold.security·2 pts·axsharma·0
Fake VS Code extension on NPM uses altered ScreenConnect utility as spywaresonatype.com·2 pts·axsharma·0
Go, Rust 'net' library affected by critical IP address validation vulnerabilitybleepingcomputer.com·1 pts·axsharma·1
GitHub Copilot is ‘unacceptable and unjust,’ says Free Software Foundationinfoworld.com·252 pts·axsharma·232
Maven Central automatically scans Java projects for vulnerabilitiescentral.sonatype.org·3 pts·axsharma·1
American Bank Systems sued for not timely disclosing ransomware attacksecurityreport.com·2 pts·axsharma·1
Bouncy Castle cryptography bug enables easy password brute-force and auth bypassbleepingcomputer.com·15 pts·axsharma·0
WordPerss Contact Form 7 plugin with 5M installs has a critical vulnerabilitybleepingcomputer.com·3 pts·axsharma·0
Critical Golang vulnerabilities revealed;SAML authentication bypass possiblebleepingcomputer.com·1 pts·axsharma·0
Source code used by Central Banks and Stock Exchanges leaked onlinesecurityreport.com·2 pts·axsharma·0
Steam gaming Windows privilege escalation attacks from writable install foldersecurityreport.com·1 pts·axsharma·1
Passwords exposed for 50k Fortinet VPNs including govt orgs and banksbleepingcomputer.com·3 pts·axsharma·1
50k FortiNet VPNs vulnerable to critical flaw, including gov and banksbleepingcomputer.com·1 pts·axsharma·0
Feds arrest Romanian duo selling FUD malware crypters: CyberSeal, DataProtectorsecurityreport.com·1 pts·axsharma·1
Discord malware “CursedGrabber” linked to Russian and Ukrainian hackerssecurityreport.com·1 pts·axsharma·1