macOS

A security research report details 'Beltdown', a sandbox escape in Anthropic's Claude Code. By manipulating git configuration files and exploiting unhardened git commands, attackers could execute code on the host system.

This technical analysis compares the efficiency and reasoning capabilities of DeepSeek's V4-Flash and V4-Pro models through real-world coding challenges. The study finds that while both models perform equally on simple tasks, the cheaper Flash model excels in complex optimization and matches the flagship's cost-effectiveness despite much higher token usage.

Google has leveraged AI-driven agents to patch over 1,000 security vulnerabilities in recent Chrome releases. This automated workflow covers everything from initial discovery via fuzzing to the generation of candidate patches.

Apple has transitioned to a more frequent security patching cadence to mitigate the risks posed by AI-driven cyberattacks. While this reduces the window for exploitation, experts warn that user behavior and the lack of advanced endpoint security frameworks on mobile remain significant vulnerabilities.

WasmForge is a novel loader designed to wrap offensive security tools in WebAssembly to evade EDR detection. It achieves this by providing a custom runtime environment that bridges WASM modules to native host APIs without requiring changes to the original tool's source code.

A new side-channel attack named FROST allows websites to bypass browser sandboxing by analyzing SSD latency. By using deep learning to process I/O traces, attackers can fingerprint the applications and websites running on a user's device.