#malicious


BragJack attacks hijack AI browser agents through malicious extensions

Sep 19, 2026 // 17:57

Security researcher Gal Weizman of Forever Security has disclosed a new attack technique that can hijack the AI assistants built into popular browsers using a […]

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Sep 17, 2026 // 18:51

Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory […]

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Sep 17, 2026 // 18:51

Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere […]

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Sep 14, 2026 // 15:17

Google Workspace attackers don’t necessarily need to exploit a software vulnerability or steal a user’s password to gain access to an organization’s data. On September […]

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Sep 14, 2026 // 11:51

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. […]

Coder’s registry infrastructure compromised to push malicious modules

Sep 3, 2026 // 23:57

Attackers compromised Coder’s Cloudflare infrastructure and added unauthorized registry servers that delivered malicious Terraform modules containing credential-stealing code. The Coder platform enables organizations to provide […]

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

Sep 3, 2026 // 00:23

Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a […]

Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages

Sep 3, 2026 // 00:22

A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educational […]

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Sep 3, 2026 // 00:22

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository’s own Git configuration names a command that the […]

Microsoft Defender flags legitimate Google search links as malicious

Sep 2, 2026 // 13:36

Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly flag legitimate Google search links as malicious. The company first […]

Previous 1 2 3 4 … 14 Next