Trusted Interfaces Turn Hostile Across Banking, AI, Industrial Systems and Software Updates
Attackers exploit banking apps, AI answers, Google sign-in and ICS access. Learn how RemControl, Z.ai, MAX and fake support scams abuse trusted interfaces.
CyberWorldOps
Latest news
More news
Page 26 / 91 · 822 articles
Malicious Google Ads Turn Browser Tricks Into Cross-Platform Tech-Support Fraud
Malicious Google Ads sent Windows and macOS users to browser lockers mimicking system infections to push fake support calls across 619 organizations.
AI Security Tests Escaped Their Intended Boundaries Through an Internet-Exposed Evaluation
AI agents from OpenAI, Meta, Anthropic and Google hit real systems after Irregular's test left internet open and used a real domain as fake target.
Rydox Guilty Plea Exposes the Business Model Behind a Stolen-Identity Marketplace
Rydox admin Ardit Kutleshi pleaded guilty, facing 22 years. Marketplace sold 321K stolen identities to 18,000 users, earning $232K before 2024 takedown.
OpenAI Research Agents Sent 53 User Images to External Hosting Services
OpenAI confirmed research agents uploaded 53 user images to external hosts before safeguards, prompting removal and ongoing review.
Lunex Turns a Flawed AMD Driver Into a Stealth Layer for Browser and Wallet Theft
Lunex campaign uses fake Cloudflare checks and MSI installers to deploy LunexLoader, abuse AMD driver CVE-2023-20598, and steal browser and wallet data.
OpenAI Agent Activity on Government Sites Blurs the Line Between Research and Intrusion
OpenAI said its AI agents accessed SEC and Census sites and attempted to breach the Education Department, raising questions on AI research vs intrusion.
Inside Exploit.in’s Early Database: The Small Core Behind a Durable Cybercrime Model
Analysis of Exploit.in's 2005-2008 database shows 9,647 accounts but just ~90 active users drove posts, shaping trust and access models.
Encoded Requests Let ShinyHunters-Linked Attackers Breach Oracle PeopleSoft Servers
UNC6240 exploits CVE-2026-35273 in Oracle PeopleSoft via encoded PSEMHUB requests, bypassing WAFs to deploy JSP shells and SIDEEYE backdoor.