Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

Z.ai has launched ZCode, a free AI coding tool powered by GLM-5.2 that challenges Cursor, Claude Code and GitHub Copilot ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

The $149 Dune keyboard can be a meeting controller at least and a script-executing keypad at best.

Eight shortcuts later, Windows finally works the way I do.

June was sweltering, but the summer heat didn’t slow down open-source software developers. Last month delivered a wave of app ...

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

Meta has restricted how its engineers use Anthropic's Claude Code and OpenAI's Codex, fearing it could accidentally distil a rival's model into its own.

A developer reverse-engineering Anthropic's Claude Code binary discovered on June 30, 2026, that the tool had been silently encoding hidden signals into its AI system prompts for at least three months ...

VS Code 1.26 prevents automatic code execution for new project folders, lets users configure whether code can be executed ...

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude ...