Posts of last few hours

Plugin4Shell is a high-severity, zero-click remote code execution vulnerability affecting major AI coding agents, including Anthropic Claude Code, OpenAI Codex, GitHub Copilot, and Google Gemini CLI. The flaw allows a malicious plugin update to execute attacker-controlled code without requiring a user to click, approve, or reinstall anything. Plugin4Shell targets the software supply chain behind AI […]

The post Plugin4Shell Zero-Click RCE Hits Claude Code, Codex, Copilot and Gemini CLI appeared first on Cyber Security News.

New AndroidX Security State libraries provide a more granular way to determine how securely patched an Android device is. The stable Security State v1.1.0 and Security State Provider v1.0.0 libraries allow developers to check the security status of individual device components and determine whether security updates are ready to be downloaded and installed on a specific device. For phone manufacturers and developers who build over-the-air (OTA) update systems, the androidx.security.state.provider library provides a standard way … More →

The post Android apps can now check security patches down to individual device components appeared first on Help Net Security.

AI-powered malware is making a familiar security problem harder to contain. Instead of keeping the same code long enough for antivirus tools to recognize it, these programs can alter their form repeatedly while retaining the same harmful purpose. The emerging model relies on large language models as an automated code factory. A malicious dropper can […]

The post AI-Powered Malware Rewrites Itself Every Hour to Evade Signature-Based Detection appeared first on Cyber Security News.

Quick Answer: The free floor is unusually strong here: Harbor (CNCF registry with scanning/signing) and Anchore’s Grype/Syft (scanning + SBOM) cover startups at $0. Pay for Snyk (dev-first fixes), Aqua (lifecycle depth), JFrog Xray (registry-native), Prisma Cloud (CNAPP enforcement), or Chainguard (hardened images that shrink the problem itself). Every container you deploy came from a […]

The post Top 10 Best Container Registry Security Tools in 2026 appeared first on Cyber Security News.

A serious Visual Studio Code security issue could let attackers gain persistent access to a developer’s workstation with a single click inside a malicious project folder. The attack abuses clickable links in VS Code’s source editor to bypass the protection expected from Workspace Trust. Workspace Trust is designed to protect users when they open code […]

The post One Click in a Malicious VS Code Project Can Give Attackers Persistent Access to Your PC appeared first on Cyber Security News.