New BioShocking Attack Tricks AI Browsers Into Leaking Credentials

LayerX found that BioShocking could trick AI browsers into leaking credentials by disguising malicious prompts as game rules.
eWeek

Clean GitHub Repo Attack Exposes AI Coding Agent Risk

Mozilla 0DIN’s Claude Code demo shows how clean GitHub repos can expose AI coding agents to prompt injection, reverse shells, and credential risk.

Safari’s new MCP server lets coding agents inspect and debug websites

Apple is introducing a new MCP server for Safari that lets coding agents inspect websites directly in the browser. Here are the details.
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
HackerNoon

Yes, Websites Can Detect Your VPN. Here's How

Learn how websites detect VPNs through IP reputation, DNS leaks, WebRTC, and browser fingerprints—and seven practical ways to reduce tracking.