Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Chrome has been automatically downloading Gemini Nano (a 4GB AI model) to users' computers without notification or an easy way to prevent it. Alex Valdes from Bellevue, Washington has been pumping ...