#across


Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content

Sep 24, 2026 // 23:38

The “third-party[.]com” domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a harmless decoy to […]

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

Sep 18, 2026 // 23:48

A flaw in four widely used AI coding agents lets someone who controls a plugin’s code repository swap the plugin an agent installs for a […]

China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America

Sep 17, 2026 // 18:51

The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin […]

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Sep 16, 2026 // 17:40

Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini […]

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Sep 16, 2026 // 16:40

Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. […]

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Sep 14, 2026 // 20:01

A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise […]

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Sep 12, 2026 // 01:31

Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December […]

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android

Aug 25, 2026 // 16:29

Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a single account to help users with both […]

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Aug 18, 2026 // 15:41

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. “TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its […]

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

Aug 5, 2026 // 23:57

OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, […]

1 2 3 … 7 Next