SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
> Search
30 results for “hijack”
Security
SecurityFake Certs Minted via Hijacked TLDs
Attackers reportedly seized control of top-level domains to issue valid-looking TLS certificates for Google and other organizations.
Cyber CrimeDNS Hijack Undercuts TLS Trust
Attackers seized three country-code domains to mint counterfeit TLS certificates for Google and other brands, Google says.
Cyber CrimeMicrosoft X Account Hijacked for Crypto Scam
Microsoft's X account with 13 million followers was hijacked to push a Clippy-themed crypto token, and the company has yet to explain how.
Cyber CrimeScammers Hijack University Emails for Fraud
Proofpoint says Nigerian scammers are using stolen .edu accounts to trick students with fake job offers and gift card schemes.
Cyber CrimeRust Developers Hit by Fake Job Call Scam
Rust team members and crate owners are being targeted by attackers who pose as recruiters to hijack credentials and push malicious packages.
Cyber CrimeKREMLIN Malware Hijacks Chrome and Edge
Elastic Security Labs details a Brazilian banking malware toolkit that abuses browser extension installs and Ethereum smart contracts to steal credentials and sessions.
AI & MLHidden Prompt Injection Threats Rise
Bowbridge warns hidden prompt injections can hijack AI agents, urging content scanning defenses.
SecurityPhaaS Campaign Targets IT Providers via M365 Phishing
CloudSEK reports BigBear 2.0 phishing operation stole over 5,100 Microsoft credentials, hitting IT firms hardest.
SecurityMikroTik routers under active attack via new SSH flaws
CERT Poland warns of active exploitation of two critical MikroTik RouterOS vulnerabilities, enabling full router hijacking.
AI & MLOpenAI agents hijacked dead wiki months before Hugging Face breach
Researchers say a swarm of OpenAI agents used a dormant German wiki as a message board in May, months before the Hugging Face incident.
Cyber CrimeNode.js Abuse Signals Shift in Malware Delivery
Threat actors are hijacking the trusted Node.js runtime to deliver malware, evading detection in targeted attacks since early 2026.
Cyber CrimeBrazilian sites hijacked in SEO fraud ruse
Chinese-speaking Gambling Goblin group turns Brazilian government sites into SEO and phishing infrastructure.
SecurityBGP hijack pushes malware via a 256-IP range
Attackers exploited routing and TLS flaws to abuse a hijacked /24 block in a 22-hour window.
SecurityBGP hijack exposes Softaculous' missing update checks
A 33-hour BGP hijack hit Softaculous, serving malware via Virtualizor updates and prompting credential resets.
SecurityAnthropic tackles Claude session hijacking via infostealers
Anthropic warns that infostealer malware is stealing Claude login sessions to drain accounts.
SecurityAI agents can be tricked into installing malware via unclaimed code packages
Researchers found 120 unregistered domains in AI documentation that could be hijacked to infect corporate networks.
AI & MLClaude Code Hijack via Website Summary
Researchers show Anthropic's Claude Code can be tricked into running malicious code by summarizing a website.
SecurityHidden HTML Hijacks AI Email Summarizers
Forcepoint shows invisible text can silently change what an AI assistant reads in your email.
Cyber CrimeNemoClaw Flaw Opens Local AI Agents to Browser-Based Attacks
A single website visit can hijack NemoClaw's local Ollama model server via DNS rebinding, according to new research.
SecurityNVIDIA AI Agent Flaw Opens Door to Model Poisoning
A NemoClaw weakness lets a webpage hijack local Ollama and inject persistent instructions into models.
Cyber CrimeSession Theft Threat Escalates as 4,532 Firms Targeted
Mirage2FA campaign hit 4,532 companies, bypassing MFA and stealing sessions.
SecurityCar head units hijacked for proxy botnet abuse
Supply-chain attack on Android car head units turns them into proxy nodes and ad fraud tools.
SecurityAndroid Malware Hijacks VPN to Silence Google Play
ToxicPanda 2.0 uses VPN permissions to block Google Play, adding 167 commands and targeting 349 apps.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
Cyber CrimeEvooo1Bot Botnet Weaponizes Edge Device Flaws
A new Mirai-based Linux botnet uses encrypted C2, SOCKS proxies, and exploits in routers to hijack edge devices.
Cyber CrimeFake VPN Extensions Hijack Traffic
Hundreds of malicious Chrome extensions impersonate VPNs, routing user traffic through a proxy.
SecurityCritical Dell VSI Flaw Allows Session Hijack
Dell has issued an urgent update for its Virtual Storage Integrator to fix a critical vulnerability that allows unauthenticated attackers to hijack sessions.
SecurityOracle Database Hijacked for Tool Storage
Researchers identified a post-exploitation toolkit concealed within Oracle database schema objects to bypass endpoint security tools.
Cyber CrimeRingCentral Spoof Hijacks M365 Accounts
Phishing service Greatness uses spoofed RingCentral emails to bypass MFA and compromise Microsoft 365 accounts.