AI

🔄 Developing Story — Last updated: April 3, 2026 16:30 UTC. Deny-rule security bypass discovered and silently patched in v2.1.90. Trojanized leak repos spreading Vidar infostealer and GhostSocks malware. See Updates section below. Updates April 3, 2026 — 16:30 UTC Patch released; security bypass confirmed; malware campaign underway. First patched version: v2.1.90. Anthropic silently released Claude Code v2.1.90, fixing a security vulnerability disclosed by Adversa AI that was discovered directly through analysis of the leaked source. No public changelog or advisory was issued. Users still running v2.1.88 or any version below v2.1.90 should upgrade immediately. The original v2.1.88 package remains unpublished on npm. ...

Claude just found 500 zero-days in production software. Kali Linux now has a native AI integration. Every security vendor is slapping “AI-powered” on their marketing page. And you’re sitting there thinking: okay, but where do I actually start? This guide is for you — the practicing pentester who knows their craft, understands the methodology, but hasn’t figured out how to meaningfully integrate AI into real engagements. We’ll cover the full kill chain, with concrete prompts, real tools, and honest assessments of where AI helps versus where it still fails. ...

By now you’ve probably seen the tweet. 1.2 million views and counting. Anthropic’s Claude Opus 4.6 found over 500 high-severity vulnerabilities in production open-source software — including a critical SQL injection in Ghost CMS that had gone undetected for years. If you work in offensive security, this should get your attention. Not because AI is coming for your job. Because the game just changed, and you need to understand how. ...