The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...
The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.
Bleeping Computer

The ‘Miasma’ worm source code briefly leaked on GitHub

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. Miasma appears to be an evolution ...
SecurityWeek

Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, creating a new software supply ...
The Next Web

A single GitHub issue could have hijacked Anthropic’s own Claude Code action and poisoned every project that uses it

A flaw in Anthropic’s Claude Code GitHub Action let attackers bypass permission checks via a fake bot account and use prompt injection to steal OIDC tokens, gaining write access to any vulnerable ...
Infosecurity-magazine.com

New “Agentjacking” Attacks Could Hijack AI Coding Agents

Researchers have revealed what they claim to be a “new class of attack” which tricks AI coding agents into executing arbitrary code on developer machines. Tenet Security, which specializes in the ...
Bleeping Computer

Max severity Ivanti Sentry vulnerability now exploited in attacks

Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways. Formerly known as ...
CSOonline

Claude Code has an MCP security problem — and your developers are already using it

Claude Code is Anthropic’s AI coding assistant — a command-line tool that developers are adopting fast. It connects to external services through Model Context Protocol, the standard that lets AI tools ...
New York Post

Russian attack sets fire to centuries-old religious site in Kyiv and kills 5 in Kharkiv

A large-scale Russian attack on Ukraine killed five rescuers in Kharkiv and wounded at least 20 people in the capital Kyiv on Monday as strikes set apartment buildings ablaze and sparked a fire at one ...
Reuters

Ukraine hits Moscow refinery in major drone attack on Russian capital

Drones hit Moscow oil refinery second time this week, mayor says Also second air strikes on Kyiv this week after monastery hit Russia to import gasoline by sea as shortage looms amid Ukraine strikes, ...
Hosted on MSN

Large plume of smoke seen from site of Moscow refinery after drone attacks

Eyewitness footage shows thick plume of smoke in southeast Moscow, near site where the Moscow oil refinery is located. Senate GOP frustrations grow as Trump blocks Republican victories 'The Ring' ...
The New York Times

Trump Again Claims Deal Is Close After Retracting Threat of Strikes

Claiming there was progress in peace negotiations, President Trump said he had canceled the next wave of planned attacks after two days of U.S. airstrikes. Max Bearak Jonathan Swan Pranav Baskar and ...