Blahalla

HalluSquatting Attack Lets Hackers Turn AI Coding Assistants Into Botnet Installers

gbhackers.com · 3 months ago

A newly disclosed attack technique called “HalluSquatting” is raising serious concerns in the AI security landscape. This technique demonstrates how attackers can exploit large language model (LLM) hallucinations to covertly compromise systems and potentially create botnets on a large scale.

GitHub Copilot IDE Coding Agents Vulnerable to Workflow-Level Jailbreak Attacks

gbhackers.com · 3 months ago

GitHub Copilot’s new coding agents, which are integrated into IDEs, are susceptible to a specific type of “workflow-level” jailbreak attacks. These attacks can bypass chat refusals, allowing agents to generate harmful code while performing standard software development tasks unwittingly.

How to Turn Your Phone Into a Personal Health Dashboard

www.nytimes.com · 3 months ago

Free apps from Google, Samsung and Apple can help you track your diet, exercise and well-being, and provide vital information during emergencies.

Why fixing your data architecture matters more than upgrading your detection models

www.csoonline.com · 3 months ago

Security leaders have been on a spending sprint. The global AI in cybersecurity market is valued at $44 billion in 2026 and is projected to reach $213 billion by 2034, a trajectory that reflects genuine belief that machine learning will close the gap between the volume of threats and the capacity of human analysts. That belief is not wrong.

AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique

www.securityweek.com · 3 months ago

Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval.

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

thehackernews.com · 3 months ago

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine ("mpengine.

npm and PyPI Malware Campaign Exfiltrates CI/CD Secrets Through Fake Payment SDKs

gbhackers.com · 3 months ago

A coordinated supply-chain campaign that pushed 17 malicious packages across npm and PyPI, masquerading as SDKs for well-known payment services including PaySafe, Skrill and Neteller.

European Organizations Have a Collaboration Security Confidence Gap

www.darkreading.com · 3 months ago

A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.

AssuranceAmerica data breach exposes records of 6.9 million drivers

www.bleepingcomputer.com · 3 months ago

American insurance company AssuranceAmerica has disclosed a data breach impacting nearly 7 million drivers after attackers gained access to its systems earlier this year.

Chrome 150 Update Patches 27 Vulnerabilities

www.securityweek.com · 3 months ago

The security refresh resolves 13 use-after-free bugs, including two critical-severity flaws found by Google.

Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images

thehackernews.com · 3 months ago

Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use public Instagram posts and reels to generate AI content, and it's enabled by default. "You can also @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your images," the social media giant said in a post.

SNOW Malware Ecosystem Uses Teams Phishing, WebSocket Tunnels, and Browser Extensions

gbhackers.com · 3 months ago

Threat actors are increasingly chaining classic phishing with collaboration platforms and covert tunneling to create highly believable intrusion paths.

Lateral movement risk rises as enterprises emphasize convenience over containment

www.csoonline.com · 3 months ago

Poorly segmented networks and weak security controls continue to undercut security organizations’ ability to identify and contain attacks, giving attackers free rein after initial compromise, according to a recent study based on real-world enterprise security telemetry.

8Layers Raises $2.9 Million for Identity Security Platform

www.securityweek.com · 3 months ago

The Spanish startup has closed an extended pre-seed funding round two months after launching its digital identity protection platform.

Everest Ransomware Encryptor Uses ConfuserEx-Protected .NET Binary With Wake-on-LAN Capability

gbhackers.com · 3 months ago

A recent technical analysis of an Everest ransomware encryptor reveals a purpose-built, ConfuserEx-protected.NET 4.0 binary that combines heavy obfuscation, misleading cryptographic declarations, and uncommon network tactics to maximize impact and impede response. The analyzed sample (hlntqyun.exe, SHA-256 1df92b…) is a 114 KB C assembly compiled for.NET Framework 4.

Umbrij Malware Lets ToddyCat Hackers Hijack Gmail Accounts Through Google API Abuse

gbhackers.com · 3 months ago

A targeted campaign in which the ToddyCat (aka APT-style) group leverages a previously observed loader family, Umbrij, to hijack Gmail accounts by abusing Google APIs. Chaining that capability to broad remote access achieved through a malicious MSI installer masquerading as the Kuailian/LetsVPN client.

Microsoft patches RoguePlanet Defender zero-day vulnerability

www.bleepingcomputer.com · 3 months ago

Microsoft has released a security patch to address a Defender zero-day vulnerability known as "RoguePlanet," disclosed after the June 2026 Patch Tuesday.

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

thehackernews.com · 3 months ago

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine instead. That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls "Friendly Fire.

New Helix Extortion Group Targets Enterprises With MFA Abuse and SharePoint Exfiltration

gbhackers.com · 3 months ago

A previously unreported data extortion operation dubbed “Helix” that targets enterprises using identity-focused entry techniques and automated SharePoint exfiltration.

Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices

www.securityweek.com · 3 months ago

Tracked as CVE-2026-11405, the vulnerability allows unauthenticated attackers to access a device's web management interface.

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

thehackernews.com · 3 months ago

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.

Claude AI Prompt Injection Attack Turns Chatbot Into Stealthy C2 Agent to Achieve Remote Code Execution

gbhackers.com · 3 months ago

Claude Desktop’s synced Personal Preferences feature can be exploited as a covert prompt-injection vector, transforming the AI assistant into a de facto command-and-control (C2) agent. This method allows for remote code execution on a compromised user workstation without the need for phishing emails or traditional malware delivery.

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

thehackernews.com · 3 months ago

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox.

DuckDuckGo Browser Blocks YouTube Ads Using uBlock Origin Filter Lists

gbhackers.com · 3 months ago

DuckDuckGo has quietly expanded its privacy-first browser capabilities by introducing a YouTube ad-blocking feature. This feature uses community-driven uBlock Origin filter lists to detect and remove video ads.

Smashing Security podcast #475: JadePuffer – the AI that ran a ransomware attack all by itself

grahamcluley.com · 3 months ago

A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, "JadePuffer".

GitHub’s public APIs are becoming an enterprise reconnaissance tool

www.csoonline.com · 3 months ago

GitHub continues to be a scintillating target for attackers because it sits in the middle of the software supply chain and gives threat actors three things they crave: source code, secrets, and automated pipelines to run amok in.

Mexico's New Cyber Plan Faces Its First Real Test

www.darkreading.com · 3 months ago

The Latin American nation's cybersecurity plan, still in the expansion phase, has to survive its own knockout round during the FIFA World Cup.

Mount Royal University confirms breach as hackers claim attack

www.bleepingcomputer.com · 3 months ago

Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the university's network.

Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours

www.darkreading.com · 3 months ago

The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

www.bleepingcomputer.com · 3 months ago

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers and users of Paysafe, Skrill, and Neteller payment applications.

How to Prevent Meta From Using Your Instagram Images in A.I.

www.nytimes.com · 3 months ago

The company’s new A.I. image generator has a surprising twist: It allows people to use images from public Instagram accounts.

Hackers exploit Roundcube flaw to spy on academic researchers

www.bleepingcomputer.com · 3 months ago

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware.

Windows 11 Cleanup Guide: 9 Ways to Make Your PC Feel Faster

www.techrepublic.com · 3 months ago

Make Windows 11 feel faster with nine cleanup tips for startup apps, storage, background processes, updates, malware scans, and more.

OpenAI’s New GPT-5.6 Is Coming Sooner Than You Think

www.techrepublic.com · 3 months ago

OpenAI is set to launch GPT-5.6 after a US security review, raising new questions for enterprise AI access, safeguards, and governance.

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

thehackernews.com · 3 months ago

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The agents are not malicious. They just do a lot of things that, to a behavioral engine, look exactly like an attack.

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

www.microsoft.com · 3 months ago

At Microsoft we encompass these security requirements, along with threat knowledge, and operational frameworks in our Secure Future Initiative (SFI), to guide what a well-defended cloud service looks like. But defining the requirements is only the start. Meeting the requirements means continuously evaluating our live services against them, at AI speed.

Fake Job Offers Impersonate Netflix, OpenAI, and FIFA to Steal Google Credentials

www.techrepublic.com · 3 months ago

A fake recruitment phishing campaign impersonates major brands and uses trusted HR platforms to steal Google account credentials.

Entra passkey enrollment vishing targets Microsoft 365 users

www.bleepingcomputer.com · 3 months ago

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey.

Vidar Infostealer Hammers SMBs via Malvertising Campaign

www.darkreading.com · 3 months ago

A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.

Australia’s Teen Social Media Ban Exposes Age Verification Gap

www.techrepublic.com · 3 months ago

Australia’s under-16 social media ban faces scrutiny after testers found major platforms did not ask for age proof.

Drift Corpus: binary diffs of 240+ 2026 Windows kernel patches

byteray-ai.github.io · 3 months ago

Patch Tuesday confirms a CVE is fixed but not what changed in the binary, which function, which check, or whether it's a real fix or just churn. The Drift Corpus is a diff of 240+ 2026 Windows kernel patches. Per entry: the changed functions with assembly, the bug class and call chain, WinDbg breakpoints to reproduce, and a plain-English root cause. Browse: https://byteray-ai.github.

Accenture Confirms Data Breach After Hacker Claims Source Code Theft

www.securityweek.com · 3 months ago

The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.

OpenMatter Network Joins HOL Initiative to Help Define Standards for Verifiable AI Collaboration and Security

gbhackers.com · 3 months ago

Melbourne, Florida, United States, July 8th, 2026, CyberNewswire OpenMatter Network today announced that it has joined the founding group of organizations participating in the Hashgraph Online (HOL) Partner Program, where the company will help develop standards, policies and verification frameworks for secure autonomous AI systems and agentic computing environments.

Cisco Advance Notification for Publication of July 15, 2026, Security Advisories

sec.cloudapps.cisco.com · 3 months ago

On July 15, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) RoomOS To fully remediate vulnerabilities to be disclosed on July 15, 2026, Cisco strongly recommends that customers upgrade to the fixed software indica

Hacker Claims Accenture Breach Exposed Source Code, SSH Keys, and Azure Tokens

www.techrepublic.com · 3 months ago

Accenture confirmed a breach after a hacker claimed 35GB of source code and cloud keys were stolen, raising questions for cloud and security teams.

China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors

www.securityweek.com · 3 months ago

Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.

Best Next-Generation Firewall (NGFW) Solutions Compared (2026): Features & Pricing

gbhackers.com · 3 months ago

Twelve firewalls, one question: which NGFW earns a place at your network edge in 2026? For most enterprises the shortlist starts with Fortinet FortiGate (best price-performance) and Palo Alto Networks (deepest application control), but the right answer shifts with your size, region, and cloud strategy, and one of the twelve vendors here isn’t an appliance at all.

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

thehackernews.com · 3 months ago

AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sounding name for a project that does not exist.

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

thehackernews.com · 3 months ago

Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-2026-50746 (CVSS score: 10.

In San Francisco, Some Home Sellers Now Ask for OpenAI or Anthropic Stock

www.nytimes.com · 3 months ago

Even before OpenAI and Anthropic go public, they are distorting home sales in the San Francisco Bay Area, as people race to buy and sellers ask for stock instead of cash.