Tag: Computing Security
Hackers host fake ChatGPT model on its official website — but really it’s just malware
Attackers abused custom ChatGPT bots and Google Sites to deliver ClickFix malware Fake troubleshooting prompts tricked victims into executing malicious commands Campaign shows trusted AI platforms increasingly leveraged in social engineering attacks Criminals are using custom GPTs in combination with Google services to deliver a ClickFix attack to their targets…
Read More
AI models are sharing sensitive data from tech companies in new ‘PixelLeak’ screenshots
AI coding agents exposed sensitive screenshots while attempting to document software changes Researchers found thousands of publicly accessible images across hundreds of organizations Findings highlight security risks from autonomous developer tools and Shadow AI practices Artificial Intelligence (AI) doesn’t have to be malicious, evil, or gullible, to be a security…
Read More
Sweden tells citizens to be ruder to phone scammers as criminals take advantage of good manners
Swedish celebrities are fronting a campaign to be rude to phone scammers The majority of Swedish phone scam victims are over 60 Swedish police state that fraudsters collect around 5.7 billion SEK a year, over £431 million Swedish celebrities have been hired to help the national government promote the use…
Read More
Apple patches CoreGraphics zero-day used in ‘extremely sophisticated’ targeted attacks on iOS devices
Apple patches high-severity CoreGraphics zero-day reportedly exploited against specific targeted individuals The vulnerability enables arbitrary code execution through maliciously crafted files on affected Apple devices Apple urged users to install the latest security updates, particularly high-value targets facing sophisticated attacks Apple has released a fix for a zero-day vulnerability it…
Read More
ShinyHunters hackers are going after Oracle systems once again – here’s what we know
ShinyHunters bypass PeopleSoft mitigation rules, reviving exploitation of a critical zero-day vulnerability The campaign has expanded globally, targeting organizations across technology, healthcare, government, and other sectors Oracle’s original patch remains effective, while organizations should investigate systems and rotate potentially exposed credentials ShinyHunters have found a way to bypass a mitigation…
Read More
Hackers build fake desktop apps to trick victims into handing over access
Threat actors spoofed major US HR/payroll platforms with fake desktop clients built via Lovable landing pages Victims downloaded a modified ScreenConnect build from GitHub, giving attackers hidden, unattended remote access Campaign shows ~291 downloads; likely targets payroll staff, enabling potential wire fraud through diverted payments Cybercriminals are impersonating large American…
Read More