Help Net Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۴:۳۰

Stolen Claude API keys can turn Claude Code into a remote-controlled implant

Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory stores feature of Anthropic’s Claude platform and pulling a 1 GB file out through the Claude Files API. Once the agent was set up, every job and every result traveled through api.anthropic.com, the endpoint the agent already calls for inference, so the attacker’s traffic looked like a…

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Help Net Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۴:۳۴

Microsoft Entra adds a seven-day safeguard against irreversible identity deletion

Microsoft Entra’s Hard Deletion Protection, now in preview, gives administrators a seven-day window to recover selected identities before they can be permanently erased. The feature is designed to help organizations respond to accidental or malicious deletion of critical directory objects. It supports users that are not synchronized from on-premises systems, cloud-only groups, applications, and service principals. En…

Source

Help Net Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۳:۴۶

Photos: IRISSCON 2026 cybercrime conference

IRISSCON 2026, the annual cybercrime conference organized by IRISSCERT, took place at the Aviva Stadium in Dublin on November 11. The all-day event gives attendees a look at the cyber threats businesses are facing right now, along with practical advice on how organizations can respond to them. Help Net Security was there, and here’s a look at the day. Visitors at IRISSCON 2026 Selena Larson, staff threat researcher a…

Source

Help Net Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۳:۰۰

AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents

Amazon Web Services has released AWS Emulator, a free tool that simulates AWS services on a developer’s laptop, a development server or in a continuous integration (CI) pipeline. The company says autonomous AI agents wrote the tool entirely, with no code written or reviewed by its engineers. There is no additional service fee, users pay for AWS resources when they deploy applications on AWS. How three teams of AI age…

Cloud Computing Open Source

Source

Help Net Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۲:۵۴

Check your GitHub repos: A secret stealer hit tens of thousands of them

A threat actor using stolen GitHub credentials has pushed a credential-stealing payload into tens of thousands of repositories since November 10. In more than 1,800 of them, the malware ran and shipped GitHub Actions secrets and cloud credentials to the attacker. Aikido spotted the campaign and named it wfx-loot. The name comes from the attacker’s own labels, “wfx” for the malware and “loot” for what it steals. Aikid…

Malware & Threats Cloud Security Supply Chain Security

Source