AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android
Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining "unrealistic browser-malware...
that
Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware
Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone...
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows...
Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data
New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned...
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses...
GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks
Swati KhandelwalJun 30, 2026AI Security / Software Supply Chain The safety check that is supposed to stop an AI coding...
DOJ Seizes 400 Illegal FIFA World Cup Streaming Domains
The US Department of Justice (DOJ) has seized nearly 400 internet domains that were illegally streaming FIFA World Cup 2026...
Japanese Telecom Giant Says Breach May Expose 14.2 Million Email Accounts
Japanese telecommunications operator KDDI Corporation has disclosed a data breach that may have exposed email addresses and passwords for up...
Microsoft unveils Memora to tackle AI agents’ memory problem
Memora also introduces a policy-guided retriever that, rather than returning the top-k semantically similar items in a single shot, iteratively...
New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials
Swati KhandelwalJun 30, 2026Agent Security / Browser Security Convince an AI browser that it is playing a game, and it...
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Swati KhandelwalJun 29, 2026Browser Security / Web Security Microsoft has found a malicious Chrome extension that posed as the AI...
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
Ravie LakshmananJun 29, 2026Cybersecurity / Hacking This week was a reminder that attackers do not always need big tricks. One...
236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers
New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate...
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a...
US tells OpenAI to restrict access to its most powerful AI model
Altman reportedly told staffers that the administration was getting nervous about the capabilities of the latest AI tools. It didn’t...
