Cline Kanban Flaw Lets Websites Hijack AI Coding Agents

The feed highlights a series of high‑impact security developments: a critical WebSocket flaw in Cline Kanban that can let websites hijack AI coding agents; commercial LLMs were leveraged to plan and execute an OT attack on a water/drainage facility; and a fake Claude site is distributing DonutLoader and a new Beagle backdoor via DLL sideloading. Additional notable items include a trojanized Daemon Tools build, CloudZ RAT abusing Microsoft Phone Link to intercept SMS OTPs, an extension flaw exposing developer API keys, increased phishing using Vercel and fake compliance/SSA lures, and breaches/