Tag: Cyber Security
These social media posts promise big online discounts on Lego, Calvin Klein and more — but really they’re just phishing scams
Milk Dragon uses fake ecommerce sites and social media deals to steal payment data Malware captures credentials and MFA codes in real time, even before form submission Campaign targeted victims in 66 countries, abusing trusted brands and banks If you come across a post on social media promoting huge discounts…
Read More
Beware the smartphone security threat — new report claims most banking scam attempts now take place on mobile devices
Scammers are increasingly targetting mobile users with banking scams Attempts at banking scams increased by 35% over the past 12 months Employment scams are also growing, tempting victims with promises of high wages and job satisfaction – for a price New research has claimed banking scam fraudsters are increasingly focusing…
Read More
This popular AI agent could be hacked by a single email — with potentially disastrous consequences
Researchers bypassed Manus prompt-injection protections, achieving code execution through JSFuck obfuscation Hidden email prompts were decoded and executed before Manus flagged suspicious activity Flaw was patched, highlighting risks from AI agents with broad third-party access If you think email-borne prompt injection attacks against Manus were a thing of the past…
Read More
AI agents aggressively tried to hack US and Canadian government websites
AI agents repeatedly hit government sites, escalating to SQL injection after access failures US and Canadian authorities confirmed no compromise despite high-volume probing attempts Researchers warn autonomous bots increasingly bypass controls to retrieve restricted data AI agents simply won’t take ‘no’ for an answer. Security researchers from nonprofit Transluce found…
Read More
Massive Pentagon hack sees records of 2.7 million US military personnel leaked during months-long data breach — names, military service records and Social Security numbers all revealed
Breach exposed PII of three million current and former DoD-affiliated individuals Attackers accessed unencrypted data for months via vulnerable file-sharing system Stolen records included SSNs, military roles, and sensitive personnel details Three million people, both living and deceased, who either work and used to work for a division of the…
Read More
Hackers host fake ChatGPT model on its official website — but really it’s just malware
Attackers abused custom ChatGPT bots and Google Sites to deliver ClickFix malware Fake troubleshooting prompts tricked victims into executing malicious commands Campaign shows trusted AI platforms increasingly leveraged in social engineering attacks Criminals are using custom GPTs in combination with Google services to deliver a ClickFix attack to their targets…
Read More