JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, ...

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude ...

Google researchers published a new paper detailing a new way to catch spammers who are using generative AI to flood Google’s platform with spam and overwhelm its quality filters. While the research is ...

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code ...

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Google began rolling out the June 2026 spam update, applying globally and to all languages. It's the second spam update of 2026, and Google announced no new spam policies with it. Ranking or traffic ...

It only took about two days - the Google June 2026 spam update is now done rolling out. It started on Wednesday, June 24, 2026 at around noon and completed on June 26, 2026 at around 2pm ET. This ...

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...