Decrypt

AI Researchers Got Chatbots to Share Cocaine Recipes Using This One Wild Trick

Researchers say a new jailbreak technique tricked AI models into treating attacker-written text as their own reasoning, ...

Travel app Hopper to pay $35M in FTC settlement over ‘unfairly’ charging hidden fees

Hopper will pay $35 million to settle FTC allegations that it used deceptive “dark patterns” to hide fees and mislead ...
SecurityWeek

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

FortiBleed campaign targeting FortiGate firewalls is tied to INC and Lynx ransomware, with over 110 million stolen credentials linked to attacks.

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every ...

The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...