seen from Singapore
seen from United States
seen from United States
seen from United States
seen from China
seen from Malaysia
seen from Bangladesh
seen from United States
seen from United States
seen from United States
seen from United States
seen from China
seen from New Zealand
seen from United States
seen from United States
seen from United States
seen from China
seen from China
seen from Russia
seen from Kazakhstan
Claude Chrome Extension Flaw Lets Any Extension Take Over AI
A vulnerability in Anthropic’s Claude Chrome extension allows other browser extensions to inject prompts and fully control AI actions without proper identity checks. Attackers can exploit the flaw to access private data, manipulate cloud files, and trigger unauthorised actions through trusted extension messaging channels.
Source: LayerX
Read more: CyberSecBrief
Stealerium Malware Campaign Harvests Credentials and Data
Stealerium spreads via multi-lure phishing campaigns using ClickFix, HTA, and PowerShell loaders, exfiltrating credentials, files, clipboard data, and webcam feeds via Telegram.
Source: LevelBlue SpiderLabs
Read more: CyberSecBrief
AI Agents Face Web Traps From Malicious Content
Teaser: Google DeepMind shows web-based “AI Agent Traps” can manipulate autonomous agents into stealing data, performing unauthorised transactions, and spreading misinformation.
Source: SecurityWeek | Google DeepMind
Read more: CyberSecBrief
Silent Ransom Group Uses IT Impersonation and Physical Intrusion for Data Theft
The Silent Ransom Group is conducting IT impersonation campaigns using phishing calls, remote access tools, and even in-person device access to steal sensitive data from US law firms. The group relies on legitimate administration tools to exfiltrate data without deploying ransomware encryption.
Source: FBI IC3
Read more: CyberSecBrief
108 Chrome Extensions Turn Browsers into Data Theft Machines
A coordinated campaign of 108 Chrome extensions silently siphoned logins, Telegram sessions, and browsing data from thousands of users using shared command infrastructure.
Source: Socket Threat Research Team
Read more: CyberSecBrief
Ransomware Operators Shift Tactics as Profits Decline
Ransomware is increasingly targeting virtualised environments and small victims, with data-theft-only models rising while average ransoms drop, according to Google Threat Intelligence.
Source: Google Threat Intelligence Group
Read more: CyberSecBrief
Hackers Drain $100 Million from Balancer DeFi Platform
A massive crypto heist has hit Balancer, where attackers exploited a code flaw to steal more than $100 million in digital assets, triggering emergency shutdowns across several linked platforms.
Source: Recorded Future News
Read more: CyberSecBrief
World Leaks Deploys Stealthy RustyRocket Malware
The World Leaks group has rolled out RustyRocket malware, stealthily exfiltrating data on Windows and Linux via encrypted tunnels and covert persistent access.
Source: Infosecurity Magazine
Read more: CyberSecBrief
