Fake IT support calls on Microsoft Teams push EtherRAT malware

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into ...
SecurityWeek

Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments

Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.
Decrypt

Fake Mac Clipboard App Delivers New Password-Stealing Malware

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.
TweakTown

Security researchers trick AI browsers into revealing passwords using BioShock-inspired prompt injection

Named after BioShock's 'Would you kindly' mechanic, the attack trains AI agents to accept false information before stealing ...

Opera Just Rolled Out a Way to Block ClickFix Attacks in Its Browser

Opera's new Paste Protect feature blocks you from copying malicious scripts or commands. It lets you bypass blocks on certain sites you trust, too.

Opera is releasing a new feature that detects and blocks malicious clipboard content

If you tend to copy/paste content from websites, you might be surprised to find yourself under the thrall of a ClickFix ...