Postman AI plugin hijacking sparks controversy after the desktop app silently modifies Codex and Claude Code configs to favor its own tools.

Related Posts:

• Apple AI Budget Cuts Target Internal Model Usage
• OpenAI Unveils ChatGPT Images 2.6 with Animated GIF Support
• ChatGPT Search Volume Reaches 20 Percent of Google

The post Postman AI Plugin Hijacking Sparks Developer Outcry appeared first on Daily CyberSecurity.

Anthropic introduces Claude Message Threads to slash payload sizes from 800KB to 1.8KB and cut response latency by 35 percent across long chats.

Related Posts:

• Cloudflare Launches Zero Wire Vulnerability Platform
• TWCA Certificate Revocation Follows Serial Number Flaw
• Raspberry Pi 16GB Price Surges Amid Memory Shortages

The post Claude Message Threads Cut Latency and Payload Size appeared first on Daily CyberSecurity.

Anthropic updated Claude Code permission modes with a toggle to suppress confirmation prompts for dangerous deletion commands during automated workflows.

Related Posts:

• Trezor Hardware Wallet Implant Found in Reseller Units
• Microsoft 365 Storage Changes Reduce Family Cloud Quotas
• Claude CarPlay Update Adds Hands-Free AI Voice

The post Claude Code Permission Modes Add Dangerous Skip Toggle appeared first on Daily CyberSecurity.

The OpenCode security breach may have exposed stored third-party API keys for 1.4% of Console users. Revoke and rotate keys now.

Related Posts:

• Sourcenext Data Breach Exposes 22.5M User Records
• UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites
• Ricardo Data Leak Exposes User Contact Details

The post OpenCode Security Breach Exposes 1.4% of Console Users appeared first on Daily CyberSecurity.

Linus Torvalds used a Claude Code Linux kernel patch to triple small data read speeds via RCU memory management, though the experimental code needs testing.

Related Posts:

• Epic Games Launcher Update Sparks Vibe Coding Backlash
• Ubuntu 27.04 Release Schedule: Tenacious T-Rex
• Raspberry Pi OS Update: Squashing Desktop Bugs

The post Claude Code Linux Kernel Patch Triples Read Speeds appeared first on Daily CyberSecurity.

Attackers are actively exploiting CVE-2026-110447 (CVSS 9.2), a critical Nextcloud Collabora Online RCE flaw in richdocumentscode, to deploy PHP webshells.

Related Posts:

• Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
• Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)
• CERT/CC Warns of Critical CVE-2026-110005 OS Command Injection in Komodo Periphery Agent

The post Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells appeared first on Daily CyberSecurity.

Socket links GlassWorm VS Code themes to malicious VS Code extensions with 8,000+ installs, including a Coca-Cola theme. See how to check yours.

Related Posts:

• Moroccan Intelligence Deploys Vast Surveillance Panopticon
• DragonForce Backdoor Adds MQTT Fallback to Microsoft Teams TURN Command Channel
• New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes

The post Socket Links Popular VS Code Color Themes to the GlassWorm Supply Chain Campaign appeared first on Daily CyberSecurity.

Plugin4Shell is a zero-click RCE hitting every major AI coding agent via a SHA pinning bypass. Claude Code and Codex are patched; Copilot and Gemini CLI are not.

Related Posts:

• FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto
• Critical IBM Guardium Vulnerabilities Need Immediate Patching
• Critical MongoDB Driver Vulnerabilities Require Immediate Patching

The post Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents appeared first on Daily CyberSecurity.

Security researchers uncovered a new GhostCode phishing kit. Learn how the GhostCode phishing kit bypasses MFA to hijack enterprise Microsoft 365 accounts.

Related Posts:

• PAPERMILL Cybercrime Cluster Delivers VenomRAT via Tax Lures
• Tajin Group Phishing Network Linked to Guarantee Marketplaces
• Smishing Triad Phishing Kit Exposed by Group-IB

The post GhostCode Phishing Kit Targets Enterprise Microsoft Accounts appeared first on Daily CyberSecurity.