Collaborate Disseminate
Microsoft researchers warn of a new ClickFix campaign targeting macOS with fake guides on Medium and Craft to deploy AMOS and SHub Stealer via Terminal commands. Continue reading Fake macOS Troubleshooting Sites Used to Steal iCloud Data in ClickFix Scam
The ClaudeBleed vulnerability allows hackers to bypass Claude for Chrome guardrails to exfiltrate private Google Drive and Gmail data. Continue reading ClaudeBleed Vulnerability Lets Hackers Hijack Claude Chrome Extension to Steal Data
Researchers have discovered a new malvertising campaign using a fake Claude AI website to plant a new, undocumented backdoor named Beagle on user devices. Continue reading Hackers Use Fake Claude AI Site to Infect Users With New Beagle Malware
Cybersecurity expert Tom Rønning finds Microsoft Edge loads all saved passwords into computer memory as cleartext, making them easy for hackers to steal. Continue reading Researcher Shows Edge Browser Stores Saved Passwords in Plaintext
Cybersecurity researcher Alexander Hanff claims that Google Chrome automatically installs a 4GB Gemini Nano AI model without user notification or consent. Continue reading Google Chrome Accused of Silently Installing 4GB AI Model on User Devices
Scammers are hiding invisible text inside phishing emails to manipulate AI-powered email filters and increase the chances of scams reaching inboxes. Continue reading Scammers Use Hidden Text to Bypass AI Email Filters in Phishing Scams
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise. Continue reading Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
ShinyHunters breached Instructure and Vimeo, exposing millions of student and user records through direct and supply chain attacks. Continue reading ShinyHunters’ Instructure Canvas LMS and Vimeo Breaches Impact Millions of Users
DataDome researchers uncovered a massive low and slow DDoS attack that delivered 2.45 billion requests using 1.2 million IP addresses. Continue reading Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion in 5 Hours
An anti-ICE website, GTFO ICE, linked to Miles Taylor, is accused of exposing the personal details of 17,662 activists, sparking concerns that the data may have reached government agencies. Continue reading Anti-ICE Site GTFO ICE Accused of Exposing Data of 17,000+ Activists