Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

Google links Turla to STOCKSTAY, a new .NET backdoor used in phishing attacks against Ukraine government and military targets ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

Tsubame Lab 株式会社（本社：東京都文京区、代表取締役 CEO：楢崎 鴻司朗、以下「Tsubame Lab」）は〔公開日〕、ラボオートメーションに特化した制御ソフトウェア『Tsubame ...

ロボットアーム・周辺機器・測定機器を連携し、実験操作からデータ取得・解析までを支援する制御ソフトウェア Tsubame Lab 株式会社（本社：東京都文京区、代表取締役 CEO：楢崎 鴻司朗、以下「Tsubame ...