FlashFeed

Full text

One of the biggest hits on the PVOD market is the courtroom drama Nuremberg , in which Russell Crowe plays the Nazi war criminal Hermann Göring and Rami Malek plays an American attorney sent to bring him to justice. The movie emerged as something of a sleeper hit at the box office, grossing around $70 million worldwide against a reported budget of approximately $10 million. The film earned mostly positive reviews for its old-fashioned storytelling and Crowe's central performance . Nuremberg was especially embraced by its target audience, who gave it a stellar 95% score on the aggregator website Rotten Tomatoes . Fans of Nuremberg can now look forward to its spiritual precursor, a landmark WWII classic, streaming on Prime Video.

Full text

Claude Code ran the dangerous command while treating it as routine recovery

A single fake error message triggered the entire hidden attack chain

Static scanners and firewalls saw nothing more than normal DNS resolution

Researchers at Mozilla's 0din team have shown how Claude Code can be manipulated into opening a hidden reverse shell on a developer's device.

The exploit required no malicious code inside the cloned project, since every visible file passed ordinary review without raising suspicion.

Instead, the dangerous instruction arrived later, fetched at runtime from a DNS text record that no scanner would ever inspect.

How a Routine Setup Error Became an Entry Point

The attack began with an unremarkable Markdown file explaining how to install a package called Axiom, a common monitoring tool.

Running the tool without initialising it produced a plain error message instructing the user to execute a specific setup command.

The research team noted this pattern closely resembles ordinary developer troubleshooting, which is precisely why it evaded suspicion so effectively.

Claude Code, attempting only to be helpful, followed that written instruction automatically, treating the documented fix as ordinary routine error recovery.

That single command triggered a hidden shell script which quietly queried a DNS text record controlled entirely by the remote attacker.

The record decoded into a base64-encoded reverse shell command, which executed silently and connected straight back to the attacker's remote server.

Persistence was also possible once inside, since the attacker could plant an SSH key or schedule a hidden cron job.

A single repository link shared in a job posting or chat message could expose every developer who simply opened it.

Why standard security tools failed to notice

Regular security tools, such as antivirus software or firewall protection , failed to notice this flaw since none of the individual steps looked suspicious on their own.

Static code-scanning tools only registered a routine DNS lookup, which did not indicate anything malicious underway.

Network monitoring registered nothing more than ordinary domain name resolution, and the agent itself viewed the command as a pre-authorised setup.

0din stressed that coding agents need to inspect exactly what setup script will actually run before executing anything at all.

It concluded that developers should never assume an unfamiliar repository is trustworthy, regardless of how ordinary its setup files appear.

This case suggests that agentic AI tools built on large language models may need far stronger runtime safeguards.

Until such agents can meaningfully evaluate what a command actually executes, similar indirect attacks will likely remain difficult to prevent.

The broader lesson extends beyond Claude Code, since most agentic AI systems share similar blind spots toward indirect prompt injection.

For now, treating unfamiliar automation as a genuine risk remains the single most reliable safeguard available to most individual developers.

Full text

Exclusive: Most of the island’s corals are likely to be species that have not been formally described by science, researcher says

Get our breaking news email , free app or daily news podcast

Scientists fear unique corals that fringe Australia’s remote Norfolk Island could disappear because of a triple threat of disease, El Niño and a federal government plan to dredge a neighbouring shipping channel.

A failure to manage sediment and pollution washing into bays from cattle farming, cleared land along with wastewater has been blamed for widespread disease and outbreaks of algae over the corals.

Continue reading...