Decrypt

Fake Mac Clipboard App Delivers New Password-Stealing Malware

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...
TweakTown

Security researchers trick AI browsers into revealing passwords using BioShock-inspired prompt injection

Named after BioShock's 'Would you kindly' mechanic, the attack trains AI agents to accept false information before stealing ...

Hidden LLM Backdoors Could Detonate At Massive Scale

AI language models can be secretly trained to steal credentials when triggered by a specific phrase. Here's what the research shows, why safety training can't stop it, and where the $414M AI security ...
The Hacker News

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Jamf says the Rust-based PamStealer targets Apple Silicon Macs, steals browser, wallet, Keychain, and clipboard data, and persists.

Newly discovered PamStealer isn’t your typical macOS malware

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
GitHub

The price trail airlines don't show you.

If you have Claude Code or Codex installed, the setup script detects it automatically. Otherwise, it asks you to paste an API key. There is a desktop app (macOS ...
GitHub

design.md

To minimize the performance advantage of specialized hardware, a proof of work (PoW) algorithm must achieve device binding by targeting specific features of existing general-purpose hardware. This is ...