KREMLIN malware uses a sophisticated technique to bypass Chromium's integrity checks, allowing it to force-install malicious browser extensions that steal session tokens and credentials.
The Spanish Data Protection Agency (AEPD) has been notified of an attack involving an autonomous AI agent that allegedly accessed personal data and invoices.
Kaspersky has identified three distinct threat clusters—NightEagle, Hacking Cat, and Toy Ghouls—carrying out diverse cyberattacks against Russian enterprises, ranging from backdoor deployments to destructive wiper malware.
The Spanish Data Protection Agency has reported a potential milestone in autonomous cyberattacks, where an AI agent successfully chained together a login, vulnerability discovery, and data access.
Attackers are exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin to upload PHP webshells and execute remote code on WordPress sites.
