#trick

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

Oct 26, 2026 // 12:05

A malicious instruction file sitting in a developer’s Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever […]

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

Sep 26, 2026 // 22:17

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat […]

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

Jul 8, 2026 // 18:11

AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sounding […]

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

Jul 7, 2026 // 18:21

A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization’s private repositories, researchers at Noma Security have shown. The attacker […]

New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

Jun 11, 2026 // 20:46

Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be driven to run attacker-controlled code […]

Zombie ZIP: The New Malware Trick That Security Tools Can’t See

Mar 10, 2026 // 23:20

The “Zombie ZIP” technique is a newly discovered evasion method that exploits how security tools parse ZIP file headers to hide malicious payloads. How it Works Scope […]