Search: “Qwen Code”

10 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Model release 12 AI safety & security 11 AI industry 8 AI research 6 Vulnerability 5 Malware 4 Policy & legal 3 Exploit / PoC 3 Ransomware 3 Industry 2 Advisory 2 Tools 1 Threat actor 1

SeverityAll critical 5 high 10 medium 12 low 4 info 30

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Malicious .git core.fsmonitor configs let attacker code run in AI coding agents like Claude Code and Codex; four of eight flaws remain unpatched.

Manifold Security disclosed eight flaws across seven command-line AI coding agents where a repository's Git core.fsmonitor configuration causes agent-spawned commands to execute attacker code outside the sandbox and without approval prompts. Fixes shipped for goose (CVE-2026-72718, CVSS 4.0 score 7.0), Claude Code on one path, and Cursor, while Hermes Agent, Qwen Code, Grok Build, and a second Claude Code path were still unpatched as of September 1. OpenAI issued three CVEs for the same class in Codex, including CVE-2026-19592, and prior related bugs include CVE-2021-43891 in Visual Studio Code and CVE-2022-24346 in JetBrains IDEs. Exploitation requires the repository to arrive with its .git directory intact, such as via archives, shared drives, or USB sticks rather than an ordinary clone.

The Hacker NewsSep 2, 14:06 UTC · 13d agoVulnerability CVE-2026-19592 CVE-2026-72718 CVE-2026-71963+3 CVEs1

7th September – Threat Intelligence Report

Check Point weekly bulletin: exploited SonicWall SMA 1000 zero-days (CVE-2026-83548/49), JFrog Artifactory auth bypass, and a 2.8M-patient Baylor Genetics breach.

Check Point's weekly bulletin covers breaches including Thomson Reuters' C-Track platform (court records across 11 US states and Canada), Baylor Genetics (2.8M patients and employees, SSNs included), Hit casinos in Slovenia, and Dropbox (~5,000 accounts via abused Lenovo email verification). SonicWall patched two exploited SMA 1000 zero-days, including CVE-2026-83548, a CVSS 10.0 pre-authentication SSRF, while JFrog fixed exploited authentication bypass CVE-2026-82329 (CVSS 9.8). Malware and actor coverage includes Gambling Goblin, JSCeal, Mirage Kitten's NodeRabbit/PollCat campaign, and DPRK Contagious Interview macOS activity, plus a FalconFlank privilege-escalation PoC against CrowdStrike Falcon.

Check Point ResearchSep 7, 14:54 UTC · 8d agoAdvisory in the wildCVE-2026-83548 CVE-2026-83549 CVE-2026-823291

Infostealers, AI, and a 90% Affiliate Cut Fuel The Gentlemen group’s Rise

Security AffairsJun 21, 17:00 UTC · Jun 21, 2026Malware CVE-2024-555911

Researchers expose MalTerminal, an LLM

Security AffairsSep 22, 08:59 UTC · Sep 22, 2025Ransomware

AI Runs the Hack: Chinese Actor Automates Cyberattacks With DeepSeek

Security AffairsAug 3, 15:53 UTC · Aug 3, 2026Exploit / PoC in the wildCVE-2026-33017 CVE-2026-3055 CVE-2026-399871

Italy Bans Chinese DeepSeek AI Over Data Privacy and Ethical Concerns

The Hacker NewsFeb 1, 06:31 UTC · Feb 1, 2025Vulnerability

Cybercriminals Eye DeepSeek, Alibaba LLMs for Malware Development

Infosecurity MagazineFeb 5, 10:30 UTC · Feb 5, 2025Malware

Security leaders say the next two years are going to be 'insane'

CyberScoopMar 27, 17:16 UTC · Mar 27, 2026Ransomware1

How hackers used Claude for missiles, drone swarms, and surveillance, while Chinese labs mined it for training data

Anthropic's threat report details eight months of Claude misuse: AI-assisted espionage against 20+ organizations, self-rewriting malware, and Chinese labs distilling Claude via fraudulent accounts.

Anthropic's threat intelligence report covering December 2025 through August 2026 documents Claude misuse across seven categories including cyber operations, surveillance, fraud, and unauthorized model distillation. A Russian-speaking espionage actor tracked as GTG-20006 used AI agents to rewrite and recompile malware evading antivirus detection, targeting more than 20 organizations in Ukraine and Europe and stealing a drone vision system SDK. Alibaba's Qwen lab ran the largest distillation campaign, with over 151 million exchanges between May and July 2026 peaking near 3 million per day to train Qwen 3.5, 3.6, and 3.7. DeepSeek, Moonshot AI, Xiaomi, and Zhipu also relayed customer or replayed traffic to Claude, including PLA-linked users analyzing CCTV footage and users with credentials tied to the Russian Ministry of Defense.

The Decoderupdated Sep 12, 10:30 UTC · 3d agofirst Sep 11, 13:50 UTC · 4d agoAI safety & security in the wild 15 sources2

Chinese Hackers Use AI Agents in Multi

China-linked campaign used the SecFlow AI-agent framework (Claude, Qwen, DeepSeek) to automate intrusions against government targets in Taiwan, Indonesia, China and Vietnam.

Hunt.io documented a second China-linked campaign wiring commercial AI models into live cyberespionage, reconstructing the SecFlow orchestration system from five accidentally exposed open directories. Targets included Taiwan's Kuomintang Party archives, Indonesia's Ministry of Foreign Affairs, mainland Chinese government and education systems, and Vietnamese industrial hosts. The most extensive compromise hit a Fengtai District government Office Automation environment, yielding LSASS and registry hive theft, 822 user records and 1.28GB of attachments including patient health data. Tooling included a GLUTTON webshell hiding payloads in PNG pixels via steganography and a fake MySQL deserialization service for client-side code execution.

Security AffairsSep 4, 11:00 UTC · 11d agoThreat actor in the wild