Why Malwarebytes Blocks Some Yahoo Mail Redirects
Yahoo Mail users: Those Malwarebytes alerts aren’t false positives. Background redirects to sketchy third-party domains are being blocked for your protection.
Read More
Four Malicious npm Packages Target Developers’ Credentials
Four malicious npm packages are stealing SSH keys, cloud credentials, and crypto wallets while turning infected machines into DDoS botnets. Typosquatting strikes again.
DOJ Seizes Deepfake Sites Under TAKE IT DOWN Act
The Department of Justice has seized two prominent deepfake pornography websites, CFAKE and SOCFAKE, marking the first major enforcement action under the TAKE IT DOWN Act. These platforms enabled users to create non-consensual intimate imagery using AI technology, affecting thousands of victims glob
NASA’s Deep Space Network Nearly Breaks During Artemis II
NASA’s Deep Space Network (DSN), the critical communications infrastructure supporting deep space missions, experienced significant strain during the Artemis II mission that brought it dangerously close to failure. Despite the near-breaking point, the 60-year-old network ultimately “worked well,” ac
Microsoft 365 Copilot Flaw Exposed User Data Via One Click
A critical vulnerability in Microsoft 365 Copilot could have allowed attackers to exfiltrate sensitive user data—including emails, files, and multi-factor authentication codes—through a single click. The flaw exploited Copilot’s AI-driven data access capabilities, leveraging malicious prompts embedd
Meta’s Face Recognition In Smart Glasses Sparks Alarm
Meta has integrated face recognition capabilities into its smart glasses platform, triggering widespread privacy concerns and regulatory scrutiny. The technology, embedded within the glasses’ firmware, can identify individuals in real-time without their knowledge or consent. While Meta claims the fe
Hackers Hijack Claude Code MCP Traffic For OAuth Tokens
Security researchers have discovered a critical vulnerability in Anthropic’s Claude Code Model Context Protocol (MCP) implementation that allows attackers to intercept unencrypted network traffic and steal OAuth authentication tokens. The flaw affects developers using Claude’s MCP servers for code i
Five OpenClaw Zero-Days Enable AI Agent Hijacking
Five critical zero-day vulnerabilities in OpenClaw, a popular AI agent orchestration framework, allow attackers to hijack legitimate AI agent sessions, execute arbitrary code, and manipulate agent behaviors. The flaws affect authentication mechanisms, input validation, and session management, enabli
Copilot ‘SearchLeak’ Attack Allows 1-Click Data Theft
A critical vulnerability dubbed “SearchLeak” has been discovered in Microsoft’s Copilot AI assistant that allows attackers to exfiltrate sensitive data through a single-click exploit. By manipulating Copilot’s search integration features, malicious actors can craft prompts that extract confidential
CryptoBandits USB Malware: Microsoft Warns Crypto Clipper Threat
Microsoft has identified CryptoBandits, a new USB-propagating malware strain that hijacks cryptocurrency transactions by replacing wallet addresses in the clipboard. The malware uses Tor for command-and-control communications, spreads via infected USB drives, and has already compromised systems acro