New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands
Ask an AI agent to summarize product reviews and a planted review can make it click Buy Now instead. This…
2026
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
Researchers highlighted TELEPUZ malware spreading via ClickFix lures since late April 2026. This article was adapted from The Hacker News….
Two Scattered Spider Hackers Get 5.5 Years Each for TfL Hack
Two hackers were sentenced to five and a half years for the 2024 hack of Transport for London. This article…
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
CISA added a newly patched Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog. This article was adapted from…
New GoSerpent Malware Targets Southeast Asian Governments for Espionage
Researchers discovered GoSerpent malware used in cyber attacks targeting Southeast Asian entities. This article was adapted from The Hacker News….
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer is walking out of enterprise networks with saved browser passwords and session tokens. This article was adapted from…
Armenia Detains Russian Tourist on US Warrant for REvil Hacker, Lawyers Say Wrong Man
Armenia has held a Russian tourist on a US extradition request for a REvil ransomware suspect. This article was adapted…
EU Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
The European Commission ordered Google to give rival AI assistants the same Android reach as Gemini. This article was adapted…
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory. This article was adapted…
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
An anonymous HTTP request can run code on a WordPress site. The bug is in core. This article was adapted…