Cyber CrimeWaterPlum's Fake Interviews Hit 30,000 Devices
A joint advisory says North Korean recruiters posed as hiring managers, using bogus coding tests to breach 30,000 devices and 7,000 crypto wallets.
> Search
22 results for “coding”
Cyber Crime
Cyber CrimePlugin4Shell Exposes AI Coding Agents to RCE
A zero-click remote code execution flaw in popular AI coding agents could let attackers run malicious code without developer interaction, researchers warn.
SecurityDocker Fixes macOS Sandbox Escape Flaws
Two Docker Sandboxes vulnerabilities let malicious guest code read or modify macOS host files, with fixes shipped in version 0.42.0.
AI & MLAI Agents Rewrite Their Own Models
Irregular's lab test found a coding agent replaced its own underlying model and fine-tuned away an embedded refusal without being told to.
SecurityGoogle Warns on AI Coding Tool Threats
Google Threat Intelligence Group warns AI coding tools are prime targets for supply chain attacks.
Cyber CrimeAI Coding Assistant Now a Ransomware Weapon
Aurora ransomware actors use Cursor Agent AI to automate post-exploitation tasks, per Gambit Security research.
SecurityAI Coding Piles Up Remediation Debt
Enterprises face growing open-source vulnerability backlogs as AI tools accelerate code output.
SecuritySecuring Windows Named Pipes
Attackers target Windows named pipes; developers must verify identities, permissions, and data.
AI & MLAI coding model's cyber skills raise alarms
Zhipu's GLM-5.3 shows faster-than-expected offensive capabilities, raising concerns about open-weight AI.
Tech NewsCursor's SpaceX Merger Closes
AI coding startup Cursor officially joins SpaceX, gaining access to its vast GPU fleet as part of a $60B deal.
AI & MLAI testing startup Blacksmith hits $550M valuation
Blacksmith's valuation jumps nearly 10x to $550 million as AI coding fuels demand for software validation.
SecurityCursor Flaw Executes Code Before Trust
A Cursor bug let repositories run commands pre-trust, even with the sandbox enabled.
AI & MLHow MCP Splits Can Leak Secrets
Malicious MCP servers can split instructions to make AI coding agents exfiltrate secrets, ASSET reports.
AI & MLClaude Code's auto mode becomes default, raising safety stakes
Anthropic makes auto mode the default in Claude Code from August 14, claiming its classifier is safer than human approval.
SecurityThe Dark Side of Vibe Coding: Hidden Security Risks in AI-Generated Code (and How to Fix)
Vibe coding helps developers build software in minutes using AI, but it introduces critical security blind spots. how to secure AI-generated code against hidden vulnerabilities
SecurityAI Coding Agents Face Hallucination Risks
Researchers identify a recurring security flaw where AI agents blindly execute commands based on predictable, hallucinated names.
Cyber CrimeJob Search Lures Hide Stealthy Malware
North Korean threat actors are using fake coding tests and steganography to compromise developer systems and steal sensitive data.
TrendingDecoding Today’s NYT Strands Puzzle
We break down the logic and vocabulary behind today's NYT Strands puzzle, game #864, for those seeking a guided approach to the solution.
SecurityGhostApproval Exposes the Illusion of AI-Guided Human Oversight
A systemic vulnerability across major AI coding assistants highlights the dangerous failure of human-in-the-loop security protocols.
SecurityThe Hidden Ledger of AI-Powered Development Costs
While AI coding tools promise efficiency, hidden security overheads and remediation expenses are complicating the true return on investment.
SecurityAI 'Vibe Coding' Erases Technical Barriers for Aspiring Cybercriminals
New research highlights how generative AI enables low-skilled attackers to craft custom, evasive malware payloads on demand.
SecurityHalluSquatting Turns AI Assistants Into Silent Botnet Factories
Researchers discover a critical vulnerability where AI coding agents are tricked into executing malicious code via hallucinations.