Infostealer Found Stealing OpenClaw AI Identity and Memory Files

Researchers at Hudson Rock have identified a live infection where an infostealer exfiltrated a victim’s OpenClaw configuration. The discovery highlights a shift in malware behaviour toward harvesting personal AI identity files. Continue reading Infostealer Found Stealing OpenClaw AI Identity and Memory Files

Firebase Misconfiguration Exposes 300M Messages From Chat & Ask AI Users

A technical mistake in the popular Chat & Ask AI app has left 300 million private messages from 25 million users exposed online. Discover what happened and how you can protect your personal data when using AI chatbots. Continue reading Firebase Misconfiguration Exposes 300M Messages From Chat & Ask AI Users

Hackers Abuse ScreenConnect to Hijack PCs via Fake Social Security Emails

Forcepoint X-labs reveals how hackers use fake SSA emails and hijacked ScreenConnect tools to bypass Windows security to target UK, US, and Canadian organisations. Continue reading Hackers Abuse ScreenConnect to Hijack PCs via Fake Social Security Emails

Google Ads and Claude AI Abused to Spread MacSync Malware via ClickFix

Cybersecurity experts at Moonlock Lab have discovered a new ClickFix attack. Hackers are using hijacked Google Ads and fake Claude AI guides to trick Mac users into installing the data-stealing MacSync malware. Continue reading Google Ads and Claude AI Abused to Spread MacSync Malware via ClickFix

287 Chrome Extensions Caught Harvesting Browsing Data from 37M Users

New investigation by Q Continuum reveals 287 Chrome extensions leaking the private browsing data of 37.4 million users to firms like Similarweb and Alibaba. Learn how these harmless tools turn your history into a product. Continue reading 287 Chrome Extensions Caught Harvesting Browsing Data from 37M Users