#found


Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Jul 13, 2026 // 20:23

Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history […]

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Jul 8, 2026 // 20:11

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are […]

282 iOS Apps Found Leaking LLM API Keys and Unauthenticated AI Proxy Access

Jun 30, 2026 // 16:56

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In […]

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

Jun 25, 2026 // 17:22

An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, the […]

OpenClaw AI agent found falling for phishing attacks, spills user data

Jun 10, 2026 // 00:37

Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commonly used to compromise human users. The OpenClaw […]

26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases

Apr 24, 2026 // 14:49

Cybersecurity researchers have discovered a set of malicious apps on the Apple App Store that impersonate popular cryptocurrency wallets in an attempt to steal recovery […]

New PhantomRaven NPM Attack Hits Developers: 88 Malicious Packages Found Stealing Data

Mar 11, 2026 // 23:27

The PhantomRaven threat actor group has launched a sophisticated supply chain attack targeting the NPM ecosystem, deploying 88 malicious packages designed to exfiltrate sensitive data from developer environments. The Attack Mechanism […]

QuickLens Chrome Extension Found Stealing Crypto via ClickFix Attacks

Feb 28, 2026 // 22:31

The QuickLens Chrome extension (version 5.8) was recently flagged for transforming from a legitimate tool into a malicious infostealer. According to reports from BleepingComputer, the extension was compromised […]