Recently, the methods used to attack cryptocurrency users have been upgrading. Security researcher 23pds issued a warning that phishing hackers are frequently using new social engineering and technical tactics, with actual cases already exposed. Simply put—don't click on unfamiliar links, and be extra cautious with suspicious transactions.

But that's not all. Researcher Adam Chester also discovered a more troubling issue: a privilege escalation and command execution vulnerability (CVE-2025-64755) in Anthropic's Claude Code. This vulnerability is quite severe; attackers can execute commands directly without user authorization. Even worse, the proof-of-concept code has already been made public. Ironically, similar vulnerabilities have appeared before in Cursor tools, indicating that the security reinforcement of AI programming assistance tools still needs to be improved.