Blahalla

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

thehackernews.com · 23 days ago

Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a transaction. The cryptocurrency clipper activity has been codenamed Silent Swap by McAfee Labs. "The campaign is delivered through unsigned installers, observed in both.

Meta Adds WhatsApp Usernames: Here’s What You Need to Know

www.techrepublic.com · 23 days ago

WhatsApp is rolling out usernames so people can chat without sharing phone numbers. Here’s how reservations, username keys, and rules work.

BMW Will Build a New Electric S.U.V. in South Carolina

www.nytimes.com · 23 days ago

The German company is doubling down on electric vehicles even as other automakers pull back after acknowledging billions of dollars in losses.

GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

thehackernews.com · 23 days ago

The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a shell trick that has been public for decades. New research from Adversa AI, which is named the bypass GuardFall, found it works against ten of the eleven popular open-source coding and computer-use agents the firm tested.

SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux

www.techrepublic.com · 23 days ago

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, developer, and AI credentials.

AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security

gbhackers.com · 23 days ago

New York, United States, June 30th, 2026, CyberNewswire Building on the momentum of its Agent Identity Security launch, AppViewX invests in partner success through enhanced enablement and co-selling support AppViewX, the only machine and agent identity security company built for the AI and quantum era, today announced the launch of its first global Partner Program.

iPhone Security Fixes May Arrive Sooner as AI Speeds Up Threats

www.techrepublic.com · 23 days ago

Apple is releasing some iPhone security fixes earlier as AI raises concerns about faster cyberattacks and shorter patch windows.

Lessons from the Underground: How to Combat Business Email Compromise

www.bleepingcomputer.com · 23 days ago

Business Email Compromise is more than an email scam. It's a coordinated operation involving compromised accounts, financial research, and cash-out networks. Flare explores how underground forums reveal how BEC attacks are planned and executed.

BlueHammer Vulnerability Exploited in Ransomware Attacks

www.securityweek.com · 23 days ago

The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released.

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

thehackernews.com · 23 days ago

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a reusable token, or a backend server that accepted requests with no key at all.

iPhone 18 Leak: Apple’s Next Pro Design May Have Appeared Online

www.techrepublic.com · 23 days ago

Leaked Tata files reportedly show possible iPhone 18 Pro design details, factory images, and supplier records ahead of Apple’s expected September launch.

Critical Progress Kemp LoadMaster Vulnerability Enables Pre-Auth Remote Code Execution

gbhackers.com · 23 days ago

Progress’s Kemp LoadMaster, a widely deployed edge load balancer and ADC, is at the center of a critical pre-authentication Remote Code Execution (RCE) vulnerability tracked as CVE-2026-8037. The flaw allows unauthenticated attackers with access to the device API to run arbitrary shell commands by exploiting an uninitialized-memory/string-termination bug in LoadMaster’s API handling.

AI-Generated Workflows Are a Silent Security Disaster

www.darkreading.com · 23 days ago

Teams are dealing with a truly dangerous problem, automation that works, but that no one understands.

Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks

www.securityweek.com · 23 days ago

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors.

Aflac Japan Data Breach Impacts 4.38 Million

www.securityweek.com · 23 days ago

Hackers accessed the insurance giant’s policyholder portal multiple times between June 15 and June 25.

BumbleBee and AdaptixC2 Deliver Akira Ransomware Through Bing SEO Poisoning

gbhackers.com · 23 days ago

BumbleBee and AdaptixC2 are being used in a highly efficient intrusion chain that starts with Bing SEO poisoning and ends with Akira ransomware deployment, showing how trusted search traffic is now being turned into an enterprise compromise vector.

The Realities of AI Video Surveillance

www.schneier.com · 23 days ago

The Financial Times has a good article on how AI is changing the capabilities of video surveillance, with information from both Israel/Iran and Russia. I wrote about this sort of thing a few years ago, how AI enables mass spying in the way that computers and networks enabled mass surveillance.

Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat

www.securityweek.com · 23 days ago

Chris Thompson's journey took him from hacking game controls as a teenager to founding IBM’s X-Force Red team.

Multiple AirDrop and Quick Share Vulnerabilities Allow Attackers to Crash Devices

gbhackers.com · 23 days ago

A new technical analysis has exposed six proximity-transfer flaws across Apple AirDrop, Samsung Quick Share on Android, and Google Quick Share for Windows, showing that device-sharing stacks still contain fragile pre-authentication attack surfaces that can be abused from wireless range.

Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History

www.securityweek.com · 23 days ago

The ruling was made in the case of a bank robber whose identity was discovered through a geofence warrant.

Malicious Chromium extension spoofs Perplexity AI to hijack browser searches

www.csoonline.com · 23 days ago

Google has removed a malicious browser extension masquerading as Perplexity AI after Microsoft researchers found it was intercepting users’ search traffic and routing queries through attacker-controlled servers before forwarding them to legitimate search engines. Microsoft Threat Intelligence said the extension masqueraded as the AI-powered answer engine to trick users into installing it.

PoC Released for NTLM reflection bypass Vulnerability that Emanbles SYSTEM Access on Windows Server

gbhackers.com · 23 days ago

A proof-of-concept has been published that bypasses Microsoft’s mitigation for the NTLM reflection vulnerability tracked as CVE-2025-33073 and allows escalation to NT AUTHORITY\SYSTEM on Windows Server.

What the Numbers Say About FIFA 2026 Cyber Risk

thehackernews.com · 23 days ago

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed. Threat actor activity was pre-planned, months out, across three sectors and at least ten languages.

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

www.securityweek.com · 23 days ago

The critical-severity defect allows unauthenticated attackers to take over the E-Business Suite’s Payments product.

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

thehackernews.com · 23 days ago

An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn Stealer. The intrusion involves the exploitation of CVE-2026-48558 (CVSS score: 10.

Insurance giant Aflac discloses data breach after subsidiary hack

www.bleepingcomputer.com · 23 days ago

American insurance giant Aflac has disclosed a new data breach after attackers breached its Japan subsidiary's systems and stole personal and bank account information.

SystemBC Malware Turns Windows Machines Into SOCKS5 Proxies for Ransomware Attacks

gbhackers.com · 23 days ago

SystemBC (also tracked as Coroxy) remains a versatile and persistent Windows malware family that operators routinely deploy to convert compromised hosts into SOCKS5 proxy gateways and to maintain remote access for follow-on operations.

Microsoft adds smarter bot protection to Teams meetings

www.bleepingcomputer.com · 23 days ago

Microsoft has introduced a new Teams admin policy that allows organizers to prevent third-party bots from joining meetings without approval.

Mircosoft adds smarter bot protection to Teams meetings

www.bleepingcomputer.com · 23 days ago

Microsoft has introduced a new Teams admin policy that allows organizers to prevent third-party bots from joining meetings without approval.

6 Best VPNs for Australia in 2026

www.techrepublic.com · 23 days ago

What's the best VPN to use in Australia? Discover the pricing, features, pros and cons of our recommended VPNs for Australia.

USB drives carrying China-linked malware infected Japanese military networks for nearly a year

www.bitdefender.com · 23 days ago

Read more in my article on the Hot for Security blog.

Kali Linux 2026.2 Release With new Hacking Tool and With Updated Desktop Environments

gbhackers.com · 23 days ago

Kali Linux 2026.2 arrives on schedule in the final week of Q2 with a pragmatic blend of desktop environment refreshes, infrastructure hardening, and practical usability refinements that will matter to both pentesters and platform maintainers. The release emphasizes polish and performance rather than headline-grabbing features: GNOME advances to version 50 and KDE Plasma to 6.6.

The AI Token Costs That Can Break Cybersecurity

www.securityweek.com · 23 days ago

As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.

Kali Linux 2026.2 released with 9 new tools, NetHunter updates

www.bleepingcomputer.com · 23 days ago

Kali Linux 2026.2, the second release of the year, is now available for download, featuring 9 new tools and numerous Kali NetHunter improvements.

Blackfield ransomware asks Nidec Corporation for $2 million ransom

www.bleepingcomputer.com · 23 days ago

The Blackfield ransomware gang is asking for a $2 million ransom from Nidec Corporation, a large Japanese manufacturer of electronic components for automotive and computing applications.

Boss Scam Uses DLL Sideloading to Hijack WhatsApp Web and Defraud Enterprises

gbhackers.com · 23 days ago

The new “Boss Scam” is a sharp escalation in CEO fraud: attackers now combine impersonation, Windows DLL sideloading, and WhatsApp Web session theft to turn trusted executive channels into fraud infrastructure.

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

thehackernews.com · 23 days ago

Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby devices with no cables or shared network. An attacker within wireless range, with just a laptop and no prior connection, can crash the sharing service on a Mac or iPhone set to receive from anyone, with no tap or prompt.

Nissan Employee Data Breached in Oracle PeopleSoft Hack

www.securityweek.com · 23 days ago

Only a handful of the 100 organizations targeted in the PeopleSoft campaign have been confirmed.

CISA: Windows BlueHammer flaw now exploited by ransomware gangs

www.bleepingcomputer.com · 23 days ago

CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks.

Critical SimpleHelp Vulnerability Exploited for Malware Delivery

www.securityweek.com · 23 days ago

The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling.

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

thehackernews.com · 23 days ago

Convince an AI browser that it is playing a game, and it can hand over your login details. That is the finding behind BioShocking, a technique from security firm LayerX that tricked six AI browsers and assistants into copying a user's credentials and sending them to an attacker. The targets included OpenAI's ChatGPT Atlas, Perplexity's Comet, and Anthropic's Claude browser extension.

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

thehackernews.com · 23 days ago

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now.

[ Removed by Reddit ]

www.reddit.com · 23 days ago

[ Removed by Reddit on account of violating the content policy.

Japan Hotel Industry Targeted With TONResolver RAT and Guest Complaint Phishing Emails

gbhackers.com · 23 days ago

Japan’s hotel sector is the latest target of a sophisticated phishing and remote-access trojan (RAT) campaign that leverages guest-complaint lures and an unusual resilience mechanism: a TON blockchain, based dead-drop resolver. Beginning in late May 2026, attackers sent highly targeted emails to Booking.

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs

thehackernews.com · 23 days ago

Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including four vulnerabilities in WebKit that were discovered using artificial intelligence (AI) tools like Anthropic Claude and OpenAI Codex Security.

Quantifind Raises $200 Million for AI-Native Risk Intelligence

www.securityweek.com · 23 days ago

Quantifind will accelerate international expansion and extend its platform’s localized risk intelligence capabilities.

Mustang Panda Targets India’s Government and Energy Sectors With ZOHOMURK and MINIRECON

gbhackers.com · 23 days ago

Two concurrent espionage campaigns by Mustang Panda targeting Indian government and energy-sector organisations, deploying a novel malware suite that includes SHARDLOADER, MINIRECON and ZOHOMURK.

Malicious Chromium Extension Spoofs Perplexity AI to Hijack Browser Searches

gbhackers.com · 23 days ago

A malicious Chromium extension that impersonated the Perplexity AI brand to intercept browser searches and capture keystrokes before delivering users to legitimate search results. The extension, listed as “Search for perplexity ai” (ID flkebkiofojicogddingbdmcmkpbplcd, version 2.2), used Manifest V3 capabilities, declarativeNetRequest (DNR) rules, and a typosquatted domain perplexity-ai[.

New Controller Flaws Expose Highway Signs and Billboards to Remote Hacking

www.securityweek.com · 23 days ago

CISA has published an advisory to inform organizations about three vulnerabilities found by a researcher in Daktronics controllers.

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

thehackernews.com · 23 days ago

A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9.8), refers to an improper privilege management and authentication flaw in Oracle Payments that could be abused to take over susceptible instances.