Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Security researchers at Novee found over 300 exploitable CI/CD workflow chains across repositories belonging to Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation. The flaws ...

OpenAI is now turning its Daybreak initiative into a defensive cybersecurity program that combines Codex updates, the GPT-5.5-Cyber release and partner access for approved organizations. As OpenAI ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

The UK Information Commissioner’s Office (ICO) has warned that cyber criminals are increasingly using artificial intelligence to execute attacks that are faster, more complex and harder to detect.

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...

The UK government has unveiled a £210m Cyber Action Plan to reinforce IT security resilience across the nation’s public services, with a new central Cyber Unit to be established to coordinate risk ...

The AI giant announced on Thursday that Claude Security is in public beta for Claude Enterprise customers across the world to use to defensively scan their own code for vulnerabilities; it can also ...

The initiative is part of the administration’s focus on addressing technology and cybersecurity vacancies by placing an emphasis on skill-based hiring. The Department of Defense is launching a Cyber ...

The UK’s National Cyber Security Centre (NCSC) has shared details of an ongoing coordinated plan to improve cyber resilience in the National Health Service (NHS). Over the past 18 months, government ...

OpenAI on Tuesday announced the next phase of its cybersecurity strategy and a new model specifically designed for use by digital defenders, GPT-5.4-Cyber. The news comes in the wake of an ...