Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...

After the CopyFail vulnerability gave root access from any user on almost all distributions last week, this week we’ve got DirtyFrag. This chains the vulnerability in CopyFail (xfrm-ESP) and ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

It took 527 stolen credentials to leak the data of over 5 million guests. In March 2026, CyberNews discovered that an ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...

We are looking for a Junior Data Scientist who doesn’t just "do data," but builds intelligent systems. In this role, you won't just be analyzing the past; you will be building the future of customer ...

A candidate profile looks clear inside a PDF, but the moment details are copied into an internal system or shared document, the structure starts breaking and small errors begin to appear. In many ...

At Flinders University, scientists have cracked a cleaner and greener way to extract gold—not just from ore, but also from our mounting piles of e-waste. By using a compound normally found in pool ...

Home » Security Bloggers Network » Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework The post Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude ...