DARKReading

A spear-phishing campaign tied to the Democratic People's Republic of Korea (DPRK) uses trusted Microsoft infrastructure to avoid detection.

Web browser companies have put in substantial effort over the past three decades to strengthen the browser security stack against abuses. Agentic browsers are undoing all that work.

Once trust is granted to the repository's author, a malicious app executes arbitrary commands on the victim's system with no other user interaction.

The bait incudes plausible subject lines and credible messages, most likely thanks to attackers' use of large language models to craft them.

Researchers say the advanced framework was built almost entirely by agents, marking a significant evolution in the use of AI to develop wholly original malware.

Hackers are already leveraging these over-permissioned programs to access the IT systems of major security vendors.

The attack consists of a NexShield malicious browser extension, a social engineering technique to crash the browser, and a Python-based RAT.

The CRM vendor advised ignoring or deleting suspicious emails and said the attacks were not tied to any breach or software vulnerability.

Familiar bugs in a popular open source framework for AI chatbots could give attackers dangerous powers in the cloud.

The indirect prompt injection vulnerability allows an attacker to weaponize invites to circumvent Google's privacy controls and access private data.