McAfee Mobile Research has identified Android malware named “Android/Xamalicious” designed to take control of devices by infecting them through the Xamarin framework. The malware uses social engineering to gain access and control over user devices for various illicit purposes. Links to an ad-fraud app, “Cash Magnet”, suggest financial motivation. Xamalicious has been detected on at least 327,000 devices, disguised as apps in categories such as health, gaming, horoscope, and productivity available in third-party markets.

Critical Claude Code Flaw Silently Bypasses Developer-Configured Security Rules
A high-severity security bypass vulnerability in Anthropic’s Claude Code AI coding agent allows malicious actors to silently evade user-configured deny rules through a simple command-padding


