Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware
Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone...
Hacking
Category Added in a WPeMatico Campaign
Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls
Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it...
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
Ravie LakshmananJul 01, 2026Password Security / Cloud Security Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack"...
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows...
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Ravie LakshmananJul 01, 2026Vulnerability / Enterprise Security Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC...
Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data
New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned...
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then...
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero...
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses...
GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks
Swati KhandelwalJun 30, 2026AI Security / Software Supply Chain The safety check that is supposed to stop an AI coding...
282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study
Swati KhandelwalJun 30, 2026API Security / Mobile Security Researchers tested 444 AI chatbot apps for iPhone and found that 282...
What the Numbers Say About FIFA 2026 Cyber Risk
The Hacker NewsJun 30, 2026Phishing / Impersonation The FIFA World Cup 2026 opened on June 11. By that date, according...
Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer
An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously...
AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks
Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby...
New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials
Swati KhandelwalJun 30, 2026Agent Security / Browser Security Convince an AI browser that it is playing a game, and it...
