Malicious Code Repositories Target Next.js Developers Through Fake Job Interview Projects

Feb 25, 2026 | Podcast

Developer-targeting campaign using malicious Next.js repositories Microsoft security researchers have uncovered an attack campaign targeting Next.js developers through malicious code repositories disguised as legitimate job interview projects. The threat actors...

Google Disrupts Chinese Espionage Campaign Using Sheets for Command and Control

Feb 24, 2026 | Podcast

https://cloud.google.com/blog/topics/threat-intelligence/disrupting-gridtide-global-espionage-campaign Google’s Threat Intelligence Group, working alongside their industry partners, has successfully disrupted a Chinese cyber espionage operation that compromised...

Critical Vulnerabilities in Anthropic’s Claude Code Enable Remote Code Execution and Credential Theft

Feb 23, 2026 | Podcast

https://blog.checkpoint.com/research/check-point-researchers-expose-critical-claude-code-flaws Cybersecurity researchers have uncovered multiple critical security flaws in Anthropic’s Claude Code, an AI-powered coding assistant, that could allow attackers to...

PromptSpy Android Malware Leverages Gemini AI to Achieve Device Persistence

Feb 20, 2026 | Podcast

https://www.welivesecurity.com/en/eset-research/promptspy-ushers-in-era-android-threats-using-genai Cybersecurity researchers have identified the first Android malware strain that exploits Google’s Gemini artificial intelligence chatbot to enhance its...

Microsoft Copilot Bug Bypasses Security Controls to Summarise Confidential Emails

Feb 19, 2026 | Podcast

Microsoft has confirmed that a software defect in its Microsoft 365 Copilot AI assistant has been causing the tool to improperly access and summarise confidential emails since late January, circumventing data loss prevention policies that organisations implement to...

Open Source Registries Face Critical Funding Shortfall as Security Threats Mount

Feb 18, 2026 | Podcast

https://fosdem.org/2026/schedule/event/8WJKEH-package-registry-economics Open source package registries are operating on dangerously thin financial margins, leaving them unable to fund the very security measures needed to protect the global software supply chain,...