Elastic Security Labs

Security researchers at Silverfort found that Anthropic's Claude Code command-line tool stores OAuth tokens in the macOS Keychain in a way that allows any process running under the same user account t…

A self-propagating npm worm called ChainDrop compromised 444 packages, including keyv (600M monthly downloads), flat-cache, and file-entry-cache, on August 4, 2026, spreading in under four hours and e…

Elastic Security Labs released an open-source CI/CD Abuse Detector that uses Anthropic's Claude LLM to analyze pull-request diffs for malicious workflow changes in GitHub Actions, GitLab CI, and Azure…