While the Windows maker did not attribute the activity to a specific threat actor, the use of VS Code tasks and Vercel ...
A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
Jorge Villegas-Lopez’s arrest started with a 2025 cybertip to the National Center for Missing and Exploited Children.
The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...