JavaScript File Upload

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...

The Hacker News

WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

WebRTC skimmer exploits PolyShell flaw since March 19, hitting 56.7% stores, enabling stealth data theft bypassing CSP.

InfoWorld

New ‘StoatWaffle’ malware auto‑executes attacks on developers

The newly observed malware abuses VS Code’s “runOn:folderOpen” feature to execute automatically from trusted projects, ...

WinBuzzer

DarkSword iOS Exploit Leaks on GitHub, Threatens Millions

A government-grade iOS exploit kit called DarkSword has been leaked on GitHub, putting hundreds of millions of iPhones ...

Security Boulevard

Which Came First: The System Prompt, or the RCE?

During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...

4 天

New ‘DarkSword’ Leak Puts Millions of iPhones at Risk After Initial Attack

A newer DarkSword exploit leak makes hacking outdated iPhones easier, exposing hundreds of millions of devices to risk.

51 分钟

OpenClaw 3.28上线！4天爆更上百项重要更新

【新智元导读】OpenClaw 3.28 大更新：不仅内置 Grok 搜索、支持 MiniMax 画图，更上线了最保命的「高危操作弹窗拦截」功能。前两天，大家都见识到了 OpenClaw 之父 Peter 的极限「草台」操作。漏打包 UI 资源文件，直接导致海量小龙虾在 3.22 版本集体白屏。当时很多朋友连控制台都进不去，还以为自己辛辛苦苦养的虾死透了。虽然后来 3.23 紧急上了修补丁 ...