Latest news
Cybercrime
Hackers Can Hijack Claude Code MCP Traffic to Steal OAuth Tokens — No Patch Coming
8 June 2026 dark6
Researchers at Mitiga Labs demonstrated a five-step npm supply chain attack that rewrites ~/.claude.json to redirect Claude Code MCP traffic...
Vulnerability
BadHost (CVE-2026-48710): Critical Authentication Bypass Threatens Thousands of AI Agent Applications
28 May 2026 dark6
A newly disclosed critical vulnerability dubbed 'BadHost' (CVE-2026-48710) enables attackers to bypass authentication in FastAPI and Starlette-based AI applications through...