3 casos · pág. 1/1
A command-injection flaw in the OpenCode AI coding agent (Anomaly) lets a malicious or hijacked remote MCP server execute code on a developer's Windows or WSL machine during OAuth sign-in. The code runs with the developer's own privileges. Pillar Security found the flaw, reported it privately on August 29 and disclosed it on October 19, p…
Silent Lynx, tracked as UAT-6275 by Cisco Talos and TAG-193 by Recorded Future Insikt Group, has been linked to a new set of attacks on government organizations across the Commonwealth of Independent States. The activity ran from June 2025 through August 2026 and used four infection chains to deploy custom reverse shells (FoalShell, Chvos…
Elastic Security Labs is tracking REF8801, a campaign in which a fake Web3 venture capital accelerator, Apex Accelerator (Apex Foundation), targets cryptocurrency startups and founders with malicious npm packages. The packages, @apexacc/cli and @apexacc/audit, pose as an AI advisor and an MCP-based security scanner, with offers of free Cl…
