Cyberattackers have successfully installed a post-exploitation toolkit, known as khunt, directly inside an Oracle database used to breach a corporate network. The attack was discovered by Huntress on July 27, 2026, after its security platform detected credential theft on a server hosting the Oracle database server. The attackers exploited a SQL injection vulnerability in a … Read more
A major disruption has shaken up a sprawling online scam network, known as Poipet, which has been using AI-powered chatbots to deceive victims across multiple continents. The network’s operations were severely impacted after OpenAI, the company behind the popular language model ChatGPT, took steps to disrupt their activities. At the heart of the Poipet scheme … Read more
A massive online scheme has been uncovered, where over 250 domains masquerading as legitimate repair services are using browser fingerprinting techniques to lure macOS users into downloading malware. The compromised domains, all tied to the “ClickFix” brand, have been found to employ a sophisticated approach that exploits vulnerabilities in Apple’s Safari and Google Chrome browsers. … Read more
Cyberattackers have been caught exploiting a vulnerability in an Oracle database to install a post-exploitation toolkit, giving them unfettered access to a corporate network. The attack was discovered by security firm Huntress on July 27, after its platform detected suspicious activity involving credential theft on a server hosting the Oracle database. The attackers exploited a … Read more
A recently discovered vulnerability in Paperclip AI, a popular artificial intelligence development platform, has left thousands of users exposed to potentially catastrophic attacks. The flaw, which allows malicious agents to run host commands via malicious agent imports, has significant implications for anyone who’s ever used the platform. Paperclip AI is designed to simplify AI model … Read more
A Shadowy Market Emerges, Selling Sensitive Customer Data and Opening Up Entire Networks to Attack In a disturbing revelation, it’s been discovered that sensitive customer data from a popular online platform called Claude is being sold on dark web marketplaces at discounted prices. What’s even more alarming is that the operator behind this illicit trade … Read more
A Major Cyber Heist Brought Down by AI: OpenAI’s ChatGPT Foils Poipet Scam Network In a stunning display of cybersecurity innovation, OpenAI’s chatbot technology has disrupted a sophisticated network of scammers using multiple fraud schemes to exploit victims worldwide. The Poipet scam network, named after the Cambodian border town where it originated, had been evading … Read more
Malicious macOS Malware Hidden in Plain Sight on ClickFix Domains Over 250 websites hosted by ClickFix, a popular domain registrar and hosting provider, have been found to be using browser fingerprinting techniques to conceal malware-laden landing pages. This clever tactic allows hackers to evade detection by security software and deceive unsuspecting users into installing malicious … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that hackers are exploiting critical vulnerabilities in three widely used software products, including IBM’s Langflow visual framework for building AI agents. The agency is urging federal agencies to take immediate action to mitigate these flaws, which have already been actively exploited by attackers. … Read more
A Sneaky New Threat Has Emerged in the npm Ecosystem, Putting Thousands of Developers at Risk A sophisticated new tactic has been spotted in the wild, leveraging a trusted package repository to spread malware. The attack involves compromising popular npm packages with a type of Trojan, designed to decode and retrieve a Command-and-Control (C2) server … Read more