Collaborate Disseminate
Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone else can, then hosting phishing pages on them to catch traffic that AI tools point their way.
Palo Alto Networks’&n… Continue reading Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware
Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it had imposed on Fable and its more tightly controlled sibling Mythos 5 about two and a half weeks earlier.
Fable 5 re… Continue reading Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls
Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the process.
The activity, per Huntress, originates from an IPv6… Continue reading Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office.
New research shows the malicious commands behind its fake “prove you’re human” pages are now handed out by API-driven servers that give each visitor t… Continue reading Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-o… Continue reading Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
New Microsoft research shows how attackers can hijack AI agents that act on a user’s behalf, using nothing more than a poisoned tool description to make the agent quietly hand over company data to an outsider.
The trick is that the agent nev… Continue reading Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data
A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline.
Researchers at QiAnXin’s XLab… Continue reading RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner.
The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote … Continue reading Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a transaction.
The cryptocurrency clipper activity has been … Continue reading Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a shell trick that has been public for decades.
New research from Adversa AI, which is named the bypass GuardFall, fou… Continue reading GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks