SecurityWeek

Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments

A researcher has disclosed the details of a prompt injection attack method named ‘Comment and Control’, which has been found to work against several popular AI code security and automation tools. The ...
KUTV

Scammers text QR codes to steal information in recent traffic violation trend

Lifelong horse owners are doing a double take after meeting a horse that looks more like a poodle.In this week’s Eye on Utah, KUTV’s Kristen Kenney introduces v Salt Lake City Council votes to suspend ...
InfoWorld

GitHub adds Stacked PRs to speed complex code reviews

Breaking up is hard to do when it comes to large pull requests, so GitHub is stacking things in favor of development teams with a new feature to facilitate code reviews and prepare for an AI-driven ...
Bleeping Computer

Claude Code leak used to push infostealer malware on GitHub

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...
Ars Technica

Anthropic says its leak-focused DMCA effort unintentionally hit legit GitHub forks

An Anthropic-backed DMCA effort to remove its recently leaked Claude Code client source code from GitHub this week resulted in the accidental removal of many legitimate forks of its official public ...
TechCrunch

Anthropic took down thousands of GitHub repos trying to yank its leaked source code — a move the company says was an accident

Anthropic accidentally caused thousands of code repositories on GitHub to be taken down while trying to pull copies of its most popular product’s source code off the internet. On Tuesday, a software ...
VentureBeat

Claude Code's source code appears to have leaked: here's what we know

VentureBeat made with Google Gemini 3.1 Pro Image Anthropic appears to have accidentally revealed the inner workings of one of its most popular and lucrative AI products, the agentic AI harness Claude ...
Bleeping Computer

Fake VS Code alerts on GitHub spread malware to developers

A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading ...
Windows Report

GitHub Copilot Will Learn From Your Prompts and Code Unless You Opt Out

Microsoft is updating GitHub Copilot’s data usage policies to allow the AI to learn directly from user interactions, marking a shift away from relying primarily on public repositories and internal ...
Ars Technica

Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...
Business Insider

Amazon orders 90-day reset after code mishaps cause millions of lost orders

Amazon's e-commerce site suffered major outages in recent weeks. One outage was linked to internal use of an AI coding tool. Amazon SVP Dave Treadwell proposes new code controls in documents obtained ...