macOS clipboard app Maccy has a fake out there stealing passwords

Maccy users are being warned about fake sites after researchers found malware using the app’s name to steal Mac login ...

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
SecurityWeek

‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

The BioShocking technique exploits AI browser reasoning, showing how easily attackers can subvert safety guardrails with ...

New BioShocking Attack Tricks AI Browsers Into Leaking Credentials

LayerX found that BioShocking could trick AI browsers into leaking credentials by disguising malicious prompts as game rules.
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...