The Hacker News

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

New TELEPUZ malware spreads through ClickFix, then steals browser cookies, logs keystrokes, runs commands, and installs ...

Now, even Russia’s most elite hackers are using Clickfix to infect devices

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Google Gemini CLI abused as a hacking agent, malware botnet operator

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
The Hacker News

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

From a rushed ShareFile shutdown to poisoned npm packages and AI assistants tricked into installing malware, here's every ...
techtimes

GitHub Copilot Jailbreak Exploits Coding Workflow to Bypass All Safety Refusals

Researchers at the Alan Turing Institute in London have documented a way to get GitHub Copilot to generate harmful content with a 100% success rate — by never asking for it directly. The technique, ...

Now, defenders are embracing the prompt injection, too

Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go ...