Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks

A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and ...

Strava Tightens API Access as AI Scraping Concerns Grow Ahead of IPO

Strava is tightening API access and login requirements to curb AI scraping and data misuse ahead of its proposed IPO. Here’s ...

Dozens of Red Hat packages backdoored through its official NPM channel

Official Red Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to machine, ...
The Verge

Strava blames zero-code AI apps and scrapers as it tightens API access

Developers will now have to pay a $11.99 / month subscription to build apps using Strava’s data. Developers will now have to pay a $11.99 / month subscription to build apps using Strava’s data. is a ...

Anthropic’s browser agent got hijacked 31.5% of the time before safeguards engaged

Anthropic, OpenAI, Google, and Meta published prompt injection disclosures in 2026 — but no two measure the same thing. What ...