The Hacker News

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Jamf says the Rust-based PamStealer targets Apple Silicon Macs, steals browser, wallet, Keychain, and clipboard data, and persists.

New PamStealer Mac malware poses as a clipboard manager to steal your login info — how to stay safe

The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the ...

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
The Next Web

“BioShocking” tricks AI browsers into leaking your passwords

LayerX tricked six AI browsers, including ChatGPT Atlas, Comet and Claude, into leaking user credentials by convincing them they were playing a game.

AI browsers were tricked into revealing passwords with a shockingly simple approach

LayerX found that AI browsers could be fooled by a fake game-like prompt called BioShocking, and some vendors haven't fixed ...
SecurityWeek

Critical SimpleHelp Vulnerability Exploited for Malware Delivery

A threat actor has been exploiting CVE-2026-48558, a critical SimpleHelp vulnerability, to drop TaskWeaver and Djinn Stealer ...

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private data.

FBI warns Microsoft users about passwordless scam

The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication ...