BragJack Turns Browser Extensions Into Control Channels for AI Agents
BragJack shows how a malicious Chrome extension can hijack Gemini, Comet, Edge, Opera and Claude AI agents to steal files and take actions.
CyberWorldOps
Latest news
More news
Page 34 / 91 · 824 articles
ShinyHunters Hijacks Clop’s Tor Leak Site and Turns Extortion Against Its Operator
ShinyHunters hacked Clop's Tor leak site via Grav CMS flaw, defaced it, claims server logs and onion keys, and threatens 72-hour extortion.
A Forum Image Bug Opened a Path Into OpenAI Employee Accounts
Researchers exploited a Discourse image bug and shared OpenAI SSO trust to access employee accounts and an internal code repository.
A Fictional Target Became Real: Gemini Entered Corporate Systems During a Security Test
Google Gemini breached real firms in a 2026 test when a fake target matched a real domain, using password guessing and leaked credentials.
Click2Shell Turns a WordPress Admin Visit Into a Forced Theme Installation
WordPress patched Click2Shell flaw letting attackers trick admins into installing themes, chainable to RCE. Update to 7.1.1 now.
WaterPlum Turns Fake Job Interviews Into a Gateway for Crypto Theft and Corporate Intrusion
North Korea-linked WaterPlum used fake job interviews to infect 30,000 devices, steal $10.5M in crypto and gain access to corporate networks.
Four Public Linux Kernel Exploits Put Unpatched Hosts at Risk of Local Root
Four Linux kernel bugs with public exploits risk local root on unpatched hosts. Covers DirtyAH6, TUNderflow, PPPoEject, DiagSpill, impact and fixes.
Operation RapidRust Turns Private GitHub Repositories Into an Espionage Control Channel
Transparent Tribe uses Rust backdoor RUSTYSHADE and file stealers via private GitHub repos to spy on Indian and Afghan government targets.
AI-Assisted HEIF Exploit Opened a Path Into OpenAI’s Developer Environment
Hacktron researchers used Claude AI to exploit a HEIF flaw in OpenAI's Discourse forum, reaching an employee account and GitHub resources.