New PamStealer Mac malware poses as a clipboard manager to steal your login info — how to stay safe

The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the background.

Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every ...
CSO Online

Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...

Fake CAPTCHA Scam 'ClickFix' Spreads Malware Across 700 Trusted Websites, Tricks Users Into Installing Malware on Windows PCs

Researchers found attackers using fake CAPTCHA pages. Users should never run PowerShell or Windows commands requested by ...

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private data.
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

YouTube ad blocker with 11 million installations with possible backdoor

Adblock for YouTube has over 11 million installations. However, it can inject script code into any page uncontrollably.