cognitive cybersecurity intelligence
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead.
The affected tools are Amazon Q Developer, Anthropic’s Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.
Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.
A targeted campaign in which the ToddyCat (aka APT-style) group leverages a previously observed loader family, Umbrij, to hijack Gmail accounts by abusing Google APIs.
Developers who build with AI coding agents grab capabilities off public marketplaces the same way they grab packages from npm or PyPI. The add-ons are
World Healthcare Security Systems – Market Analysis, Forecast, Size, Trends and Insights IndexBox
The fake report message that ends with a stolen Reddit account Help Net Security
