This AI-coded malware apparently leaked its own GitHub private token

Whoopsie.
The Hacker News

ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More

Massive regional C2 footprint More than 1.3K C2 Servers Discovered in the Middle East Hunt.io said it identified more than ...
Visual Studio Magazine

The Next Generation of Developer Productivity with GitHub Copilot and Visual Studio

GitHub Copilot in Visual Studio has expanded beyond code completion to support the entire development workflow, including code generation, review, and debugging/diagnostics. Setting up agent ...
The New Yorker

Saving a Lost Generation of Young Men—with Chop Saws

Brendan LaFave grew up in a big Catholic family—the second-eldest of eight siblings living in a large house in Ann Arbor, Michigan. He’s tall, with shaggy hair and an earnest manner, the kind of ...
Microsoft

Inside an AI‑enabled device code phishing campaign

Microsoft Defender Security Research has observed a widespread phishing campaign leveraging the device code authentication flow to compromise organizational accounts at scale. While traditional device ...
Bleeping Computer

Claude Code leak used to push infostealer malware on GitHub

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...
TechCrunch

Anthropic took down thousands of GitHub repos trying to yank its leaked source code — a move the company says was an accident

Anthropic accidentally caused thousands of code repositories on GitHub to be taken down while trying to pull copies of its most popular product’s source code off the internet. On Tuesday, a software ...
VentureBeat

Claude Code's source code appears to have leaked: here's what we know

VentureBeat made with Google Gemini 3.1 Pro Image Anthropic appears to have accidentally revealed the inner workings of one of its most popular and lucrative AI products, the agentic AI harness Claude ...
CSOonline

Your MFA isn’t broken — it’s being bypassed, and your employees can’t tell the difference

Scary news: Hackers aren't "breaking" your MFA anymore — they’re just riding shotgun during your login to steal the session token right out from under you. Multi-factor authentication was supposed to ...
Ars Technica

Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...
TechRepublic

Microsoft Authenticator Flaw on Android, iOS Could Leak Login Codes for Millions

A vulnerability in Microsoft Authenticator for Android and iOS could expose login codes to malicious apps on the same device. Microsoft has released a patch. A newly discovered vulnerability in ...
GitHub

video-generation-skill

Open-source ai image generator skill and ai video generator skill for Codex, Claude Code, OpenClaw, Cursor, and more. Powered by CyberBara API with Nano Banana, Sora 2, Seedance, and Kling support. No ...