ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Florida Python Challenge returns after last year’s record removal

Video from previous story: FWC announces winners of the 2025 Florida Python Challenge TAMPA, Fla. (WFLA )— In just about a ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

AI browsers were tricked into revealing passwords with a shockingly simple approach

LayerX found that AI browsers could be fooled by a fake game-like prompt called BioShocking, and some vendors haven't fixed ...

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private ...
The Hacker News

ransomware | Breaking Cybersecurity News | The Hacker News

This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. Everything looks normal until someone tests a ...