New Malware Targets Car Head Units, Expands Notorious Botnet
Researchers link novel car head unit malware to BadBox botnet, expanding vehicle infection surface for mass abuse.
Wednesday, August 26
Monday, August 24
Grok Attack Exploits Encrypted Prompts for Data Theft
PremiumEncrypted prompt injection in xAI's Grok enables zero-click theft of names, locations, subscription tiers and prompt history.
Russian Espionage Groups Exploit OAuth and WhatsApp for Account Hijacking
PremiumThree suspected Russian espionage clusters abuse OAuth and WhatsApp linking to hijack accounts at academia, aerospace and governments.
ToxicPanda Malware Exploits VPN Permissions to Target Android Users
PremiumToxicPanda Android malware abuses VPN permissions to block Google Play and expand remote command control across apps.
Friday, August 21
Wednesday, August 19
Wednesday, August 12
Malicious SIM Cards Exploit Cellular IoT Devices Through Vulnerable Modems
Malicious SIM cards can run attacker code on cellular modems inside EV chargers, industrial routers, and telematics units, enabling device takeover.
Chrome Extension Returns with Malicious Intent After Removal
A Chrome extension removed for stealing AI chats returned to the Web Store and resumed malicious activities — immediate remediation recommended.
Monday, August 10
Critical Vulnerabilities in Claude Code and Gemini CLI Expose CI Workflow Secrets
PremiumFlaws in Claude Code and Google's Gemini CLI let an unprivileged GitHub issue execute code on CI runners and expose secrets.
Massive Malware Campaign Exploits npm Packages to Spread RAT and Infostealer
PremiumCampaign published nearly 800 malicious npm packages delivering a cross-platform RAT and infostealer for Windows, macOS and Linux.
Phishing Campaign Exploits Microsoft 365 Accounts in Financially Driven Attacks
PremiumActive AitM phishing campaign hijacks Microsoft 365 accounts to collect payroll and finance emails using residential proxies.
Google Chrome 151 Update Resolves Critical Security Flaws
PremiumChrome 151 fixes multiple memory-safety bugs, including critical use-after-free issues — prioritize browser updates.
Friday, August 7
Critical Vulnerability in Popular Code Editors Puts Millions at Risk
PremiumCritical one-click RCE affecting Cursor, VS Code, and Google Antigravity could compromise developers by executing code via malicious links.
Security Researcher Uncovers Vulnerability in ChatGPT's Sandbox Environment
PremiumResearcher demonstrated a PoC providing C2-style influence over ChatGPT's isolated sandbox, highlighting container escape risks.
AI Coding Agents Expose Critical Vulnerabilities
PremiumRepeatable vulnerabilities across Anthropic, Google, and OpenAI coding agents allow RCE, API credential theft, and supply-chain compromise.
AI Browsers Under Siege: Zero-Click Vulnerabilities Threaten ChatGPT Atlas and Claude
PremiumZero-click prompt injection vulnerabilities let attackers hijack Claude and ChatGPT Atlas via crafted emails and social posts, unpatched as reported.
Critical Security Flaws Fixed in AWS, Google, and Vercel Tools
PremiumAgent infrastructure flaws at AWS, Google, and Vercel allow forged instructions to invoke agent tools without model authorization, bypassing guardrails.
Wednesday, August 5
Friday, July 31
Google Fortifies Chrome with Patches for 370 Security Flaws
PremiumChrome 151 fixes 370 vulnerabilities, including seven critical flaws in core browser components and rendering engines.
Amazon Traces npm Package Hijacking to North Korean Group
PremiumAmazon attributes debug and chalk npm package hijacks to North Korea-linked actors who pushed wallet-draining scripts into popular packages.
Get these articles delivered to your inbox.
Subscribe free