Harbour Technology Consulting

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing -

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude Code and OpenClaw.

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve -

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve UNC5792 and UNC4221 have been targeting US government officials, military leaders, and allied personnel.

Claude Code runs a GitHub repo's hidden malware without verification, giving attackers full control -

Claude Code runs a GitHub repo's hidden malware without verification, giving attackers full control Security researchers at Mozilla's 0DIN platform have shown how a single compromised GitHub repo can take over a developer's machine the moment an AI coding tool like Claude Code runs its setup. The catch: the malicious code only loads at runtime via a DNS query, invisible in the repo, to scanners, a...