Claude Code flaws allow remote code execution and API key theft via untrusted repositories; three bugs fixed across 2025–2026 releases.
A fake Go module posing as golang.org/x/crypto captures terminal passwords, installs SSH persistence, and delivers the ...
A critical OpenClaw flaw allowed malicious websites to connect to locally running agents, brute-force passwords without ...
An AI tool and researcher found a critical XRP Ledger bug that could have enabled fund theft before an emergency patch blocked it.