Collaborate Disseminate
Matthew Knoot and Erick Prince have been jailed for 18 months each for helping North Korean hackers infiltrate US firms through remote laptop farms. Continue reading Two US Men Jailed for Helping North Korean Hackers Infiltrate US Firms
DigiCert revokes 60 code signing certificates after hackers used a malicious support chat attachment to sign the Zhong Stealer malware. Continue reading Hackers Trick DigiCert Into Issuing Certificates Used to Sign Malware
JDownloader confirms a security breach where hackers manipulated official download links to distribute malicious files between 6 and 7 May 2026. Continue reading Hackers Hijack JDownloader Site to Deliver Malware Through Installers
Microsoft researchers warn of a new ClickFix campaign targeting macOS with fake guides on Medium and Craft to deploy AMOS and SHub Stealer via Terminal commands. Continue reading Fake macOS Troubleshooting Sites Used to Steal iCloud Data in ClickFix Scam
The ClaudeBleed vulnerability allows hackers to bypass Claude for Chrome guardrails to exfiltrate private Google Drive and Gmail data. Continue reading ClaudeBleed Vulnerability Lets Hackers Hijack Claude Chrome Extension to Steal Data
Researchers have discovered a new malvertising campaign using a fake Claude AI website to plant a new, undocumented backdoor named Beagle on user devices. Continue reading Hackers Use Fake Claude AI Site to Infect Users With New Beagle Malware
Cybersecurity expert Tom Rønning finds Microsoft Edge loads all saved passwords into computer memory as cleartext, making them easy for hackers to steal. Continue reading Researcher Shows Edge Browser Stores Saved Passwords in Plaintext
Cybersecurity researcher Alexander Hanff claims that Google Chrome automatically installs a 4GB Gemini Nano AI model without user notification or consent. Continue reading Google Chrome Accused of Silently Installing 4GB AI Model on User Devices
Scammers are hiding invisible text inside phishing emails to manipulate AI-powered email filters and increase the chances of scams reaching inboxes. Continue reading Scammers Use Hidden Text to Bypass AI Email Filters in Phishing Scams
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise. Continue reading Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE