Gemini CLI CVSS 10.0 flaw in versions below 0.39.1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace ...
The Standard Performance Evaluation Corporation (SPEC) is updating its most important benchmark after nine years: Following ...
Attackers are dropping the CloudZ RAT and a fresh plug-in, Pheno, to hijack the Windows-based bridge between PCs and ...
Mozilla is the latest legacy tech brand to make a play for the enterprise AI market. But the company behind Firefox and Thunderbird isn’t releasing its own standalone AI model or agentic browser.
Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...
Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...
France is replacing 2.5 million Windows desktops with Linux - and I mapped out its new stack ...
Coding agents are like absent-minded professors, this fixes that gap ...
Home » Security Bloggers Network » Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework The post Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude ...