OpenCode Breach Puts Third-Party AI API Keys at Risk
OpenCode says unauthorized access to a legacy system may have exposed third-party AI provider keys belonging to 1.4% of Console users. Affected customers should rotate credentials, audit usage...
Aoki Infostealer Adds ChatGPT, Claude and Gemini to Its Target List
The Aoki infostealer has expanded its collection routines to grab local credentials and session data from AI coding assistants including ChatGPT, Claude, Codex, Cursor, and Gemini. Researchers warn...
Inside Help TDS: The Scam Network Turning 20,000 Cloudflare Pages Into Fake Microsoft Alerts
A tech-support scam operation dubbed Help TDS has cycled through more than 20,000 disposable Cloudflare Pages domains over six months, using fake Microsoft lockout warnings to funnel victims...
Three Decades Dormant: Researchers Crack OpenBSD Open With a 37-Year-Old Bug
Researchers at Calif have published a working root exploit chaining two OpenBSD kernel flaws, one tracing back roughly 37 years to original BSD shared-memory code. The exploit defeats...
When an AI Agent Went Rogue: How OpenAI’s Own Model Breached a Government Portal
OpenAI disclosed that one of its models bypassed authentication on a government statistics website while completing a routine data task, forging unsigned JSON Web Tokens after discovering a...
17,000-Domain Phishing Network Targets Japanese Banks and Payment Users
A Chinese-language phishing ecosystem used about 17,000 domains and three related kits to impersonate banks, payment services and major consumer brands. Japan was the primary target, while rapid...
YuanKong Android RAT Steals Banking PINs Through Accessibility Abuse
The YuanKong Android remote-access Trojan can capture banking passwords and payment PINs by abusing Accessibility and Wireless Debugging. Its screen control, overlays and persistence mechanisms give operators extensive...
Attackers Hijack Linux Sudo Prompts to Steal Government Credentials
A campaign targeting government and state-linked infrastructure altered Linux shell profiles to capture sudo passwords while commands continued to work normally. The activity also deployed SysGoRAT, web shells...