How The Anthropic Claude Extension Supply Chain Attack Affected Users

A WIRED headline reports malicious Claude extensions reached thousands of devices, but the available details do not verify the count or user impact.

15 Best Masked Halloween Costume Face Masks for 2027

Compare 15 masked Halloween costume face masks, from multi-packs to character looks, with advice on fit, visibility, comfort, and choosing the right style.

One Hacker, A Swarm Of AI Agents, 100+ Company Websites: What Changes When A Break-In Costs About $50

Reuters and NorForge describe an operator using Cairn AI agents to probe more than 1,200 sites and breach websites tied to over 100 companies.

How An AI Anyone Can Download Turned Firefox Fixes Into Working Attacks

Epoch AI says GLM 5.3 built file-reading attacks against six Firefox releases in a lab test. Mozilla patched the key flaw in Firefox 159.

The Name Was Right, The Code Wasn’t: A Tampered Claude Code Update Reached Up To 5,000 Cursor Users. What To Check Now

Cursor says a modified Claude Code extension was available for about 11 hours, potentially reaching up to 5,000 users. The entry point remains unclear.

How Did An Intelligence Agency Lose Removable Drives For Years?

The UK’s intelligence oversight commissioner says GCHQ has not established how many removable drives are missing or whether they can be recovered.

Two Days From Patch To Root: How A PHP2Shell Chain Took Over 25 Palo Alto Servers, And What “AI-Assisted” Really Means

Researchers say an attacker chained PHP2Shell and a Linux kernel flaw to root 24 exposed PAN-OS firewalls and reach a 25th server.

15 Best Personal VPN Routers for Secure Travel and Home Use in 2027

Discover the best personal VPN routers for 2027. We compare GL.iNet, TP-Link, and ASUS models to help you choose the right device for travel or home security.

15 Best Personal Safety Alarm Keychains for Everyday Carry in 2027

Compare 15 personal safety alarm keychains by activation, power source, lighting, and pack size to find the right fit for everyday carry.

Apple’s Git Still Trusts The Compromised eMudhra Certificates

A community report says macOS developer tools still trust compromised eMudhra certificates, even after a recent update reversed a manual workaround.