Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks
Bash (Bourne Again SHell), the 1989 GNU rewrite of the original Linux Bourne Shell, can still cause problems more than three decades later through its…
Category: SecurityWeek
BlueHammer Vulnerability Exploited in Ransomware Attacks
A Microsoft Defender vulnerability tracked as BlueHammer and CVE-2026-33825 is being exploited in ransomware attacks, according to the cybersecurity agency CISA. BlueHammer is one of…
Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat
From bad game hacker to an elite good red team hacker. Chris Thompson is a hacker. His journey took him from hacking game controls as…
Quantifind Raises $200 Million for AI-Native Risk Intelligence
Quantifind has announced raising $200 million in a growth funding round that brings the total raised by the company close to $320 million. The new…
Straiker Raises $64 Million for AI Security Platform
Cybersecurity startup Straiker today announced raising $64 million in a Series A funding round that brings the total raised by the company to $85 million.…
Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines
Attackers can take over developers’ systems by hiding indirect prompts in normal-looking repositories that, when executed by Claude Code, cause the agent to spawn a…
WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy
WhatsApp is beginning to accept global reservations for usernames, a privacy feature set to launch later this year that will allow users to communicate on…
‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access
JFrog has published technical details and a proof of concept (PoC) targeting a recent high-severity Linux kernel vulnerability that could allow any local user to…
New Enterprise-Ready MCP Specification Brings New Security Challenges
MCP is evolving from a single-user server to an enterprise-ready server fit for expanded cloud-native AI usage. Companies have 12 months to get ready. The…
Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targets
Russia-linked APT Turla has been targeting government and military organizations in Ukraine with a new backdoor specifically designed for espionage, Google Threat Intelligence Group (GTIG)…
$3 Million Reportedly Stolen in Polymarket Hack
Decentralized prediction market Polymarket has promised to fully refund users affected by a hacker attack that came to light this week. Polymarket is a cryptocurrency-based…
Chinese Framework Powers 200,000 Scam Sites
More than 200,000 websites are using investment scam templates built with the Chinese open source framework Uni-App, Infoblox reports. A cross-platform development toolkit, Uni-App allows…