Blahalla

Claude AI Prompt Injection Attack Turns Chatbot Into Stealthy C2 Agent to Achieve Remote Code Execution

gbhackers.com · 13 days ago

Claude Desktop’s synced Personal Preferences feature can be exploited as a covert prompt-injection vector, transforming the AI assistant into a de facto command-and-control (C2) agent. This method allows for remote code execution on a compromised user workstation without the need for phishing emails or traditional malware delivery.

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

thehackernews.com · 13 days ago

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox.

DuckDuckGo Browser Blocks YouTube Ads Using uBlock Origin Filter Lists

gbhackers.com · 13 days ago

DuckDuckGo has quietly expanded its privacy-first browser capabilities by introducing a YouTube ad-blocking feature. This feature uses community-driven uBlock Origin filter lists to detect and remove video ads.

Smashing Security podcast #475: JadePuffer – the AI that ran a ransomware attack all by itself

grahamcluley.com · 13 days ago

A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, "JadePuffer".

GitHub’s public APIs are becoming an enterprise reconnaissance tool

www.csoonline.com · 13 days ago

GitHub continues to be a scintillating target for attackers because it sits in the middle of the software supply chain and gives threat actors three things they crave: source code, secrets, and automated pipelines to run amok in.

Mexico's New Cyber Plan Faces Its First Real Test

www.darkreading.com · 13 days ago

The Latin American nation's cybersecurity plan, still in the expansion phase, has to survive its own knockout round during the FIFA World Cup.

Mount Royal University confirms breach as hackers claim attack

www.bleepingcomputer.com · 13 days ago

Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the university's network.

Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours

www.darkreading.com · 13 days ago

The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

www.bleepingcomputer.com · 13 days ago

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers and users of Paysafe, Skrill, and Neteller payment applications.

How to Prevent Meta From Using Your Instagram Images in A.I.

www.nytimes.com · 13 days ago

The company’s new A.I. image generator has a surprising twist: It allows people to use images from public Instagram accounts.

Hackers exploit Roundcube flaw to spy on academic researchers

www.bleepingcomputer.com · 13 days ago

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware.

Windows 11 Cleanup Guide: 9 Ways to Make Your PC Feel Faster

www.techrepublic.com · 13 days ago

Make Windows 11 feel faster with nine cleanup tips for startup apps, storage, background processes, updates, malware scans, and more.

OpenAI’s New GPT-5.6 Is Coming Sooner Than You Think

www.techrepublic.com · 13 days ago

OpenAI is set to launch GPT-5.6 after a US security review, raising new questions for enterprise AI access, safeguards, and governance.

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

thehackernews.com · 13 days ago

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The agents are not malicious. They just do a lot of things that, to a behavioral engine, look exactly like an attack.

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

www.microsoft.com · 13 days ago

At Microsoft we encompass these security requirements, along with threat knowledge, and operational frameworks in our Secure Future Initiative (SFI), to guide what a well-defended cloud service looks like. But defining the requirements is only the start. Meeting the requirements means continuously evaluating our live services against them, at AI speed.

Fake Job Offers Impersonate Netflix, OpenAI, and FIFA to Steal Google Credentials

www.techrepublic.com · 13 days ago

A fake recruitment phishing campaign impersonates major brands and uses trusted HR platforms to steal Google account credentials.

Entra passkey enrollment vishing targets Microsoft 365 users

www.bleepingcomputer.com · 13 days ago

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey.

Vidar Infostealer Hammers SMBs via Malvertising Campaign

www.darkreading.com · 13 days ago

A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.

Australia’s Teen Social Media Ban Exposes Age Verification Gap

www.techrepublic.com · 13 days ago

Australia’s under-16 social media ban faces scrutiny after testers found major platforms did not ask for age proof.

Drift Corpus: binary diffs of 240+ 2026 Windows kernel patches

byteray-ai.github.io · 13 days ago

Patch Tuesday confirms a CVE is fixed but not what changed in the binary, which function, which check, or whether it's a real fix or just churn. The Drift Corpus is a diff of 240+ 2026 Windows kernel patches. Per entry: the changed functions with assembly, the bug class and call chain, WinDbg breakpoints to reproduce, and a plain-English root cause. Browse: https://byteray-ai.github.

Accenture Confirms Data Breach After Hacker Claims Source Code Theft

www.securityweek.com · 13 days ago

The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.

OpenMatter Network Joins HOL Initiative to Help Define Standards for Verifiable AI Collaboration and Security

gbhackers.com · 13 days ago

Melbourne, Florida, United States, July 8th, 2026, CyberNewswire OpenMatter Network today announced that it has joined the founding group of organizations participating in the Hashgraph Online (HOL) Partner Program, where the company will help develop standards, policies and verification frameworks for secure autonomous AI systems and agentic computing environments.

Cisco Advance Notification for Publication of July 15, 2026, Security Advisories

sec.cloudapps.cisco.com · 13 days ago

On July 15, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) RoomOS To fully remediate vulnerabilities to be disclosed on July 15, 2026, Cisco strongly recommends that customers upgrade to the fixed software indica

Hacker Claims Accenture Breach Exposed Source Code, SSH Keys, and Azure Tokens

www.techrepublic.com · 13 days ago

Accenture confirmed a breach after a hacker claimed 35GB of source code and cloud keys were stolen, raising questions for cloud and security teams.

China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors

www.securityweek.com · 13 days ago

Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.

Best Next-Generation Firewall (NGFW) Solutions Compared (2026): Features & Pricing

gbhackers.com · 13 days ago

Twelve firewalls, one question: which NGFW earns a place at your network edge in 2026? For most enterprises the shortlist starts with Fortinet FortiGate (best price-performance) and Palo Alto Networks (deepest application control), but the right answer shifts with your size, region, and cloud strategy, and one of the twelve vendors here isn’t an appliance at all.

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

thehackernews.com · 13 days ago

AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sounding name for a project that does not exist.

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

thehackernews.com · 13 days ago

Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-2026-50746 (CVSS score: 10.

In San Francisco, Some Home Sellers Now Ask for OpenAI or Anthropic Stock

www.nytimes.com · 13 days ago

Even before OpenAI and Anthropic go public, they are distorting home sales in the San Francisco Bay Area, as people race to buy and sellers ask for stock instead of cash.

Claude Cowork Expands to Web and Mobile With Background AI Agent Workflows

gbhackers.com · 13 days ago

Claude Cowork was expanded beyond the desktop, rolling out web and mobile versions that let AI-driven task sessions persist across devices and continue running in the background without an active connection. The beta rollout begins with Max-tier subscribers over the coming weeks, with additional plan tiers to follow.

3 Ways AI Powers Service Desk Attacks and How to Prevent Them

www.bleepingcomputer.com · 13 days ago

Specops Software explains how AI is making service desk impersonation attacks more convincing, personalized, and scalable, along with practical steps organizations can take to strengthen onboarding and identity verification.

Webinar Today: Why Email Security Keeps Failing

www.securityweek.com · 13 days ago

Live Webinar: Wednesday, July 8, 2026, Register to Attend You can block every phishing email in the inbox. The campaign still runs. The infrastructure is still live. And the same attacker retargets your organization tomorrow. That’s the gap in how most organizations think about email security: detection without disruption.

Attackers Can Generate Duplicate Verified GitHub Commits Using Signature Malleability

gbhackers.com · 13 days ago

Attackers can silently clone “Verified” GitHub commits by abusing signature malleability in Git’s commit-signing formats, creating byte‑different commits with identical content, valid signatures, and fresh “Verified” badges under new hashes.

New Ghost Phishing Wave Is Breaking Traditional Email Security

thehackernews.com · 13 days ago

A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghost phishing” technique keeps the malicious page hidden until it decrypts and comes to life inside the victim’s browser.

SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

thehackernews.com · 13 days ago

A new banking fraudulent operation is targeting customers of Mexican banks, fintech, payment processors, and cryptocurrency exchanges using ClickFix lures.

IonStack Exploit Chain Lets Hackers Root Android 17 Phones With a Single URL Click

gbhackers.com · 13 days ago

Nebula Security has revealed a significant exploit chain known as “IonStack,” demonstrating how attackers could gain full root access on Android 17 devices with just a single click on a malicious URL. This raises serious concerns about browser-to-kernel attack surfaces in today’s mobile ecosystems.

Fancy Bear Uses LSB Steganography and Reflective Loading to Run C# Remote-Control Trojan

gbhackers.com · 13 days ago

A new intrusion campaign attributed to APT‑C‑20 (aka Fancy Bear, APT28) demonstrates the group’s continued refinement of stealthy, fileless techniques: weaponized Office documents that deploy a COM‑hijacking DLL.

Felons, Fraudsters Flog Offensive Cybersecurity Startup

krebsonsecurity.com · 13 days ago

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names.

Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations

www.securityweek.com · 13 days ago

The "Rogue Agent" vulnerability could have enabled attackers to silently manipulate AI conversations, exfiltrate data, and compromise every Dialogflow CX agent within the same Google Cloud project.

GitHub AI agent leaks private repositories via prompt injection attack

www.csoonline.com · 13 days ago

A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and publishing it publicly, exposing a broader risk as enterprises deploy AI agents with privileged access to software development environments, according to new research from Noma Security.

DuckDuckGo browser now blocks YouTube video ads

www.bleepingcomputer.com · 13 days ago

DuckDuckGo announced that its browser can now block most video ads on YouTube, including those shown before the video starts playing and during playback.

Cybercriminals exploit India’s tax filing season with a dual-malware campaign

www.csoonline.com · 13 days ago

Cybercriminals are exploiting India’s tax filing season with a new malware campaign that refuses to put all its eggs in one basket. Researchers at Cyderes have uncovered a sophisticated phishing operation that poses as the Indian Tax Department to deliver two remote access trojans (RATs) through a multi-stage infection chain, giving attackers persistent access to compromised systems.

GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures

thehackernews.com · 13 days ago

New research shows that a signed Git commit's hash is not the one-of-a-kind name that much of the software world assumes it to be. Given any signed commit, someone without the signing key can mint a second commit with the same files, author, and date, and a valid signature, GitHub still stamps "Verified." Everything a reviewer would check matches. The commit's hash does not.

AI Chatbot Warnings May Not Stop Hallucinations, Researchers Say

www.techrepublic.com · 13 days ago

A June 2026 research review found that AI chatbot warning labels may be a weak safeguard for organization-backed AI advisors, raising new audit questions for IT, security, and compliance teams.

ESET Threat Report H1 2026 Highlights Malicious AI Skills, ClickFix Surge, and EDR Killers

gbhackers.com · 13 days ago

ESET’s H1 2026 threat report shows attackers accelerating the use of familiar playbooks with AI-flavored lures, social engineering, and defense evasion rather than inventing entirely new ones. The clearest signals are the rise of malicious AI skills, a doubled ClickFix footprint, first-wave AI-powered Android malware, record QR-code phishing, and a growing ecosystem of EDR killers.

The Verification Step Is the New ATO Battleground in 2026

thehackernews.com · 13 days ago

For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools, and waited for matches. Credential stuffing was cheap, scalable, and for defenders, relatively well understood. That era is ending. Not because attackers gave up, but because the front door finally got harder to kick in. Passkeys are now mainstream.

Telco giant KDDI says data breach affects over 12 million people

www.bleepingcomputer.com · 13 days ago

Japanese telecommunications giant KDDI says that millions of people had their email addresses and passwords exposed after attackers breached an email platform used by five internet service providers (ISPs) in the country.

GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code

thehackernews.com · 13 days ago

An AI coding assistant that refuses to answer a dangerous request in its chat box can answer it anyway if the same request is broken into small, ordinary-looking steps inside a code editor. That is the finding of a new study of GitHub Copilot by researchers Abhishek Kumar and Carsten Maple.

Cybersecurity and the Gap Between Skill and Ability

www.schneier.com · 13 days ago

Last week, national security agencies from the Five Eyes, that’s the rich, English-language-speaking countries club, jointly released a statement warning of the increasing cyber risks of AI models: in particular, their ability to autonomously hack into systems and networks.

CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws

www.securityweek.com · 13 days ago

Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agencies given until July 10 to patch.