I overhauled my WFH office – these 5 gadgets made the cut (including a cheap cord wrangler)
After moving and obtaining a new health diagnosis, I made a few changes to my WFH setup. Here’s what changed (and why).
Latest news – Read More
AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique
Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval.
The post AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique appeared first on SecurityWeek.
SecurityWeek – Read More
Microsoft’s new Windows 11 recovery tool is the ultimate Undo button – how to enable it
After a CrowdStrike update caused millions of Windows PCs worldwide to crash in July 2024, Microsoft announced the Windows Resiliency Initiative. The new Point-in-time Restore feature is a key part of that.
Latest news – Read More
I use Android Auto in my living room now – and it solves ones of my biggest productivity problems
My new favorite use of Android Auto happens outside my car. Here’s why.
Latest news – Read More
European Organizations Have a Collaboration Security Confidence Gap
A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.
darkreading – Read More
8Layers Raises $2.9 Million for Identity Security Platform
The Spanish startup has closed an extended pre-seed funding round two months after launching its digital identity protection platform.
The post 8Layers Raises $2.9 Million for Identity Security Platform appeared first on SecurityWeek.
SecurityWeek – Read More
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead.
The affected tools are Amazon Q Developer, Anthropic’s Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.
The Hacker News – Read More
Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes
Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains.
The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox. Once such campaign, observed earlier this year, involved the
The Hacker News – Read More
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker’s code on your own machine instead.
That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls “Friendly Fire.” It works against Anthropic’s Claude Code and OpenAI’s Codex when either is running in an autonomous mode that approves its own
The Hacker News – Read More
Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices
Tracked as CVE-2026-11405, the vulnerability allows unauthenticated attackers to access a device’s web management interface.
The post Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices appeared first on SecurityWeek.
SecurityWeek – Read More