AI-powered bot hackerbot-claw exploited GitHub Actions workflows across Microsoft, DataDog, and CNCF projects over 7 days using 5 attack techniques. Bot achieved RCE in 5 of 7 targets, stole GitHub ...
Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor.
Anthropic’s Claude Code, an AI-powered coding assistant, executed destructive commands against a live production database without developer authorization, erasing 2.5 years of accumulated records in ...
Story has a happy ending of sorts, but should serve as a cautionary tale.