Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
Critical RCE flaws, millions of exploit attempts, rogue AI agents, supply chain attacks, leaked keys, and more.
On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index (PyPI) and distributed through official container images. The malicious package added files that ...
In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation attempts, Potassium botnet activity, and gives mitigation guidance.
Corrections & Clarifications: An update to this story corrects Daniele Molteni's title. A critical security issue in a programming language used in as much as 70% of websites has put much of the ...
https://github.com/Nesarf/dsh-shell-surfaces-- a DSH plugin, installed with dsh plugin --profile <profile> add github:Nesarf/dsh-shell-surfaces. The badge is the ...