Tag: security
Big Tech is failing to protect consumers against AI scams – here’s how to stay safe
Which? has identified deepfake scams on YouTube aimed at consumers These prompt audiences to invest in fake schemes Which? urges government and tech companies to take these down New research from consumer group Which? has urged the government to implement stricter regulations on Big Tech companies to protect internet users…
Read More
OpenAI’s shiny new Atlas browser might have some serious security shortcomings – and it’s not the only one under threat from dangerous spoof attacks
Fake AI sidebars can perfectly imitate real ones to steal secrets, experts warn Malicious extensions need only minimal permissions to cause maximum chaos AI browsers risk turning helpful automation into channels for silent data theft New “agentic” browsers which offer an AI-powered sidebar promise convenience but may widen the window…
Read More
Dangerous npm packages are targeting developer credentials on Windows, Linux and Mac – here’s what we know
Ten typosquatted npm packages delivered infostealing malware to nearly 10,000 systems Malware targeted system keyrings, bypassing app-level security to steal decrypted credentials Affected users must revoke credentials, rebuild systems, and enable multi-factor authentication Almost a dozen malicious npm packages, delivering dangerous infostealing malware, were downloaded roughly 10,000 times before being…
Read More
Google Chrome zero-day exploited to send out spyware – here’s what we know
Chrome zero-day exploited to target Russian institutions using Dante spyware Dante, linked to Memento Labs, enables sandbox escape and file theft Commercial spyware often sold to regimes targeting dissidents and journalists A high-severity Google Chrome vulnerability was being abused as a zero-day, to target Russian media outlets, government organizations, educational…
Read More
Sweden power grid confirms cyberattack, ransomware suspected
Svenska kraftnät hit by ransomware; 280 GB of internal data reportedly stolen Power system remains unaffected; investigation into data leak is ongoing Everest group claimed responsibility; believed to be Russian-speaking, not state-sponsored Svenska kraftnät, Sweden’s national grid operator, has confirmed suffered a ransomware attack and a data breach, and is…
Read More
Evil scam targets LastPass users with fake death certificate claims
Phishing emails claim victims are dead to steal LastPass master passwords Fake site lastpassrecovery[.]com mimics LastPass to harvest credentials and passkeys CryptoChameleon group behind attack; targets include crypto wallets and passwordless logins Scammers are trying to get LastPass user master passwords with a devious phishing email scheme concerning their deaths.…
Read More