SecurityNewBGP hijack exposes Softaculous' missing update checks
A 33-hour BGP hijack hit Softaculous, serving malware via Virtualizor updates and prompting credential resets.
> Search
30 results for “hijack”
SecurityNew
SecurityAnthropic tackles Claude session hijacking via infostealers
Anthropic warns that infostealer malware is stealing Claude login sessions to drain accounts.
SecurityAI agents can be tricked into installing malware via unclaimed code packages
Researchers found 120 unregistered domains in AI documentation that could be hijacked to infect corporate networks.
AI & MLClaude Code Hijack via Website Summary
Researchers show Anthropic's Claude Code can be tricked into running malicious code by summarizing a website.
SecurityHidden HTML Hijacks AI Email Summarizers
Forcepoint shows invisible text can silently change what an AI assistant reads in your email.
Cyber CrimeNemoClaw Flaw Opens Local AI Agents to Browser-Based Attacks
A single website visit can hijack NemoClaw's local Ollama model server via DNS rebinding, according to new research.
SecurityNVIDIA AI Agent Flaw Opens Door to Model Poisoning
A NemoClaw weakness lets a webpage hijack local Ollama and inject persistent instructions into models.
Cyber CrimeSession Theft Threat Escalates as 4,532 Firms Targeted
Mirage2FA campaign hit 4,532 companies, bypassing MFA and stealing sessions.
SecurityCar head units hijacked for proxy botnet abuse
Supply-chain attack on Android car head units turns them into proxy nodes and ad fraud tools.
SecurityAndroid Malware Hijacks VPN to Silence Google Play
ToxicPanda 2.0 uses VPN permissions to block Google Play, adding 167 commands and targeting 349 apps.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
Cyber CrimeEvooo1Bot Botnet Weaponizes Edge Device Flaws
A new Mirai-based Linux botnet uses encrypted C2, SOCKS proxies, and exploits in routers to hijack edge devices.
Cyber CrimeFake VPN Extensions Hijack Traffic
Hundreds of malicious Chrome extensions impersonate VPNs, routing user traffic through a proxy.
SecurityCritical Dell VSI Flaw Allows Session Hijack
Dell has issued an urgent update for its Virtual Storage Integrator to fix a critical vulnerability that allows unauthenticated attackers to hijack sessions.
SecurityOracle Database Hijacked for Tool Storage
Researchers identified a post-exploitation toolkit concealed within Oracle database schema objects to bypass endpoint security tools.
Cyber CrimeRingCentral Spoof Hijacks M365 Accounts
Phishing service Greatness uses spoofed RingCentral emails to bypass MFA and compromise Microsoft 365 accounts.
SecurityCritical Krayin CRM Flaw Enables Takeover
A missing authentication vulnerability in Krayin CRM version 2.2.4 allows remote attackers to hijack the administrator account and gain full system access.
SecurityChrome Targets Policy-Based Hijacking
Google's upcoming update aims to stop malware from using enterprise policy keys to seize control of user browser settings.
SecurityCaptiveCrunch Exploits Hospitality Wi-Fi
Threat actors are hijacking hotel network gateways to push fraudulent software updates and capture user credentials via deceptive portals.
SecurityArch Linux Halts AUR Adoption Protocols
Security concerns over hijacked packages have forced a temporary freeze on adopting AUR contributions to protect the ecosystem.
SecurityCritical Auth Bypass Found in Better-Auth SCIM
A severe authorization flaw in the better-auth SCIM plugin allows attackers to hijack user accounts and sessions by manipulating provider ID namespaces.
SecurityOpenClaw Dashboard Critical XSS Flaw Found
A stored cross-site scripting vulnerability in OpenClaw Dashboard v3.0.0 allows unauthenticated attackers to hijack administrator sessions.
SecurityCritical Auth Flaw Found in AMMOS Toolkit
A missing authentication vulnerability in the AMMOS Instrument Toolkit GUI allows unauthenticated attackers to hijack sessions and issue spacecraft commands.
Cyber CrimeBlueNoroff’s Sophisticated Phishing Kit
North Korean threat actors are leveraging AI-driven lures and Telegram account hijacks to target cryptocurrency and finance professionals.
SecurityCritical Better Auth SCIM Flaw Enables Takeover
A critical vulnerability in the @better-auth/scim plugin allows authenticated users to hijack accounts via provider ID collisions and bypass security controls.
Cyber CrimeInsurance Phishing Pivots to Real-Time
New research details how threat actors are ditching delayed credential harvesting for live, session-based account hijacking.
SecurityCritical Pheditor Auth Bypass Found
A flaw in the Pheditor forced password-change flow allows unauthenticated attackers to hijack administrative accounts on systems using default credentials.
SecurityBudibase OIDC SSO Flaw Allows Account Takeover
A critical vulnerability in Budibase allows attackers to hijack existing user accounts by exploiting improper email validation in the OIDC login process.
Cyber CrimeHotel Wi-Fi DNS Hijacks Target M365
Researchers report that compromised hotel network gateways are redirecting business travelers to sophisticated phishing portals.
Cyber CrimeRussian Intel Targets NATO Logistics
Intelligence agencies report that Russian actors are hijacking IP cameras to monitor military movements across Europe and Ukraine.