keyword

Claude

Tracked by 1 person

Incident history

The Hacker News·16d ago

Link — click to select, then copy:

https://breachfeed.com/article/cmttk1yjq0032hnu29s1gnqj6

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command that the agent runs on the developer's machine, four of them still unpatched at publication. The command executes as the user, outside the agent's sandbox and without an approval prompt, and exploitation requires the repository to arrive

Cyber Security Headlines·17d ago

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzp7002ohku2h9yfbie9

Claude sessions hijacked, AI jolts global finance, agents get too many keys

Claude sessions get hijacked Anthropic is warning that common infostealer malware is stealing active Claude browser sessions, letting attackers get into accounts and burn through paid usage without needing a password or two-factor code. The company is signing affected users out, removing stored payment methods and refunding unauthorized charges. But revoking the session doesn't remove the malware, so victims still need to clean the device, change credentials and revoke other active sessions.…

Dark Reading·18d ago

Link — click to select, then copy:

https://breachfeed.com/article/cmttl1yng00c7hmu2eqzxg21i

Anthropic Users Hit by Infostealer Attacks, Session Thefts

A threat actor used a variety of infostealers to collect session information and access Claude accounts belonging to an unknown number of users.

Graham Cluley·8/12/2026

Link — click to select, then copy:

https://breachfeed.com/article/cmttl38q700dxhmu2fxsbxgp0

Smashing Security podcast #480: This is the AI service you should never sign up to

Would you like access to Anthropic's Claude at 90% off the normal price? All you have to do is redirect your traffic to a mysterious service called "Poison Claude". Only problem is that it's run by fraudsters... Meanwhile, a phishing-as-a-service platform called "Greatness" has come up with something rather nasty: a phishing attack that doesn't need a fake website, a suspicious URL, or your password. Just a real Microsoft login page and a moment of misplaced trust - and the attackers walk off…

Graham Cluley·8/7/2026

Link — click to select, then copy:

https://breachfeed.com/article/cmttl38q700dzhmu2aemxho3y

Beware cut-price AI services that read your every word

f someone offered you 90% off the official price to access Claude, the powerful AI model from Anthropic, would you be tempted? It turns out that around 900 people were, and they may be regretting their decision. Read more in my article on the Fortra blog.

Cyber Security Headlines·7/29/2026

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzp7003ghku20qf6r28e

Leaky BMCs, Claude finds encryption flaws, Google's new names

Thousands of server BMCs leak password hashes Claude finds flaws in encryption Google gives old threat actors new names Get the show notes here: https://cisoseries.com/cybersecurity-news-leaky-bmcs-claude-finds-encryption-flaws-googles-new-names/ Huge thanks to our sponsor, Pindrop AI attacks on the enterprise are skyrocketing. Is your tech stack keeping up? Deepfake and synthetic voices are slipping through a channel your defenses were never built to cover—stealing credentials and exposing…

Troy Hunt·7/21/2026

Link — click to select, then copy:

https://breachfeed.com/article/cmttl4j1w00ehhmu2s8p4bz25

Weekly Update 513: Clauding The Home Network

I reckon this week's video on how Claude is tying together info from UniFi, Home Assistant and the Pi-Hole is an absolute ripper. Or at least the concept is - if ever there was an actual value proposition for AI it's taking lots of noise and

Cyber Security Headlines·7/17/2026

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzp9003qhku2wcj1lga5

ClickLock's kill loops, TELEPUZ ClickFix tricks, 1Password's agentic login

ClickLock stealer uses kill loops to force password entry TELEPUZ malware uses ClickFix to steal data and run commands 1Password's new Agentic Mode lets Claude log into accounts Notes: https://cisoseries.com/cybersecurity-news-clicklocks-kill-loops-telepuz-clickfix-tricks-1passwords-agentic-login/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind…

Cyber Security Headlines·7/10/2026

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa003whku2psnwsf3n

Interpol's global fraud sweep, China's Claude Code flag, old Github account tricks

Interpol's fraud sweep goes global China flags Claude Code Old GitHub accounts, new tricks Get the show notes here: https://cisoseries.com/cybersecurity-news-interpols-global-fraud-sweep-chinas-claude-code-flag-old-github-account-tricks/ Thanks to our episode sponsor, Vanta Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk,…

← Newest