Alibaba Distilled Claude: Anthropic’s 28.8M-Query Alert
Anthropic accuses Alibaba and Qwen of the largest AI distillation attack ever — 28.8 million Claude queries across 25,000 fake accounts. What developers ...
LastPass Data Breach 2026: Klue OAuth Attack Hits 8 Firms
LastPass customer data stolen via Klue OAuth supply chain breach on June 12. HackerOne, Recorded ...
AI Agent Security: The $98M Production Gap Developers Are Ignoring
Two AI agent security startups raised $98M in 72 hours. Arcade.dev and Convey raised 60M ...
Alibaba Ran 29M Fake Claude Queries to Steal AI Capabilities
Anthropic accuses Alibaba of running 28.8 million Claude API exchanges via 25,000 fake accounts to ...
Microsoft MDASH in Production: AI Agents Are Finding Real Windows CVEs
Microsoft’s MDASH agentic scanner is now live in production, finding critical Windows CVEs via 100+ ...
CVE-2026-20253: Patch Splunk Enterprise Now — Pre-Auth RCE
CVE-2026-20253 is a CVSS 9.8 pre-auth RCE in Splunk Enterprise 10.0 and 10.2. Active exploitation confirmed. Patch to 10.2.4 or 10.0.7 immediately.
Fake PostCSS npm Packages Drop a Windows RAT — Act Now
Three malicious npm packages impersonating PostCSS tools installed a Windows RAT on developer machines. Check ...
npm v12 Ships in July: Prepare Your CI/CD Now
npm v12 lands in July with install scripts disabled, git deps blocked, and remote URLs ...
OpenAI GPT-5.5-Cyber Patches cURL, Python, Go in 5 Days
AI is merging security patches into cURL, Python, and Go. OpenAI's GPT-5.5-Cyber and Patch the ...
GitHub’s 10,000 Trojan Repos: The Orchid Campaign Targets AI Agents
A solo researcher exposed 10,000 GitHub repositories delivering StealC malware, undetected for over a year. ...