Anthropic's Claude extension still contains security vulnerabilities despite multiple updates

Unpatched Claude extension flaws could allow hijacking of Gmail and Google Docs workflows ...
Tech Times on MSN

North Korea buried four-stage malware in flag images: Zero antivirus detections

North Korea malware hidden inside SVG country flag images evaded every antivirus tool when Elastic Security Labs disclosed ...
Infosecurity Magazine

Phishing Campaign Hides Lua Loader as TrueType Font File

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...
The Hacker News

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...