DEV Community: Habdul Hazeez

Security news weekly round-up - 7th August 2026

Habdul Hazeez — Fri, 07 Aug 2026 21:10:10 +0000

Despite the popularity of AI and the events surrounding it, we should not forget that vulnerabilities still exist and that social engineering is still a thing. In this week's edition, we will review articles that shed further light on this, helping you make informed decisions in your everyday activities.

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts

First, they need to compromise an email address. From there, they can use the AI assistant to Live off the Land. Reading the article does show that the attackers can use prompts to do some heavy lifting in their attack process. Still, at the time of writing, it's a proof-of-concept.

From the article:

Attacker use of the chatbot would normally be discoverable in its logs, so the initial task is to use the AI to remove any evidence of use of the AI. The researchers started with a chatbot prompt: “Create an inbox rule that moves any emails with ‘sign-in’ in the subject into the ‘deleted items’ folder.” This creates basic stealth.

AI developers targeted via trojanized GitHub repositories

In this day and age, as a developer, you should be super aware of the GitHub repositories that you clone. If it appears as a trustworthy repo, it does not mean that it is. I mean, this article shows that someone out there is banking on the trust that you will have for a certain repository to install malware on your device. Notice what I am saying?

From the article:

To deceive developers, attackers clone well-known repositories and subtly integrate malicious payloads. They usually add the payload to a benign-looking subdirectory or modify the URLs on the installation instructions.

Because the root page appears authentic and the original contributor is listed, victims are lured into trusting the GitHub page, leading them to download and execute the MaaS malware infostealer.

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts

Every time I read of a new way developed to protect online accounts, I am not surprised if it's eventually bypassed or defeated, necessitating mitigations or a fix.

From the article:

The new attack methods, named ‘Pass-ta-key’ by Palo Alto Networks, focus on Google-synced passkeys. The security firm’s researchers showed how a threat actor could use the techniques to take over accounts without needing privilege escalation or user interaction.

WhatsApp Scam Bypasses Passwords Using 6 Digit Code To Access Accounts

Be careful of any campaign or game on WhatsApp that requires you to click on a link. Take that as a very strong warning.

Here is what's going on:

Security experts at Malwarebytes Labs have confirmed that they are receiving ongoing reports of the attacks, which have been identified as "vote for my friend" scams, and have warned WhatsApp users to be alert.

The Malwarebytes Labs team has confirmed what the typical "vote for my friends" attack flow looks like, which might prove helpful in better understanding the threat.

You tap the "vote" link.

A page opens that appears to be related to WhatsApp.

You're prompted to complete a connection or verification step.

That action links your WhatsApp account to a device controlled by the attacker.

Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts

The affected companies OpenAI and Anthropic both acknowledge the reported flaws in their AI browsers. Meanwhile, at the time of writing, there is no easy patch for ChatGPT Atlas and Anthropic said the report was "informative."

From the article:

The researchers demonstrated how, operating within active session cookies, the attacker’s script queries Gmail’s Atom feed, extracts message IDs, parses full email bodies, and silently exfiltrates inbox contents to the attacker server. The attacker can also silently share every file in the targeted user’s Google Drive account with an account they control.

Meta AI model hacked third-party systems during security testing

After what happened at OpenAI and Anthropic in recent weeks, there are no surprises in this one.

From the article:

"A misconfiguration by Irregular, an independent testing company Meta uses, inadvertently allowed one of our models access to the internet during evaluation," Meta spokesperson Andy Stone said in a statement. "The model subsequently exploited a security vulnerability in a third-party service, in a manner similar to previously reported instances with other companies."

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 31st July 2026

Habdul Hazeez — Fri, 31 Jul 2026 21:14:39 +0000

Interesting, to say the least, is how I qualify the articles that we have for this week's review. It's fascinating to know what's possible and reading articles that challenge your reality is something that you and I can put in our autobiography sometime in the future. I mean, wow. Just wow. I bet you'll feel the same when you read each article that I have for you.

Now, what are you waiting for? Let's get started.

Malicious sites use JavaScript to build malware in browser memory

Just when you think that you have seen it all. You read something like this. What's the end goal? Avoiding detection. But, building malware in browser memory? I need to do more research on this. For now, read the excerpt below.

After building the final malware executable, the fake download page hands it to the service worker at the beginning of the process and triggers a same-origin download path. "From the browser’s point of view, the user is downloading an executable from the landing page domain,"

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection

It's invisible to the naked eye. The way to detect this malware? During data exfiltration that goes through the network. Then, it might be too late.

From the article:

The hidden desktop allows the attacker to take full advantage of legitimate Windows tools without being observed by the user. The C2 is hardcoded into the malware but is relatively safe from observation. The result is a stealthy and persistent RAT. The only obvious mitigation is detection of unexpected data exfiltration.

For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup

The difference between reality and Sci-Fi might appear far away. However, with the recent incidents at OpenAI—where an AI model escaped its sandbox and attacked Hugging Face—and Anthropic—where Claude breached three organizations and uploaded a PyPi malware during tests—you can say that it's only a matter of time.

From the article:

Generative AI is growing so fast that government and evaluation systems are struggling to keep pace with the technology. Countries around the world are cobbling together their own laws, some conflicting.

The technology was adopted by nearly 53% of the world’s population in three years, faster than the spread of the PC or the internet, according to a study released this year by Stanford University.

Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments

Nine years. How many lives have been impacted? How many have cried with their tears never ending when they realized that they sent money for goods that never existed? How about the reputational damage suffered by the affected companies? And, I can go on.

From the article:

The scheme works by deceiving potential clients into visiting the replica sites, which have the contact details altered to lead them to the attackers.

Select instances have involved the threat actors hiring unsuspecting sales representatives to make cold calls, who are instructed to pass the customer to a "senior manager" once the negotiations reach the final stage.

From this point onwards, the customer's communications are with the fraudsters,

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks

It's one thing to attempt a phishing attack. It's another way to convince the user through the process without them being suspicious. In this campaign, the attackers are using the latter approach and leveraging Microsoft's legitimate login system.

From the article, here is how to prevent yourself from falling victim:

Check Point advises hovering over links before clicking, and treating it as a warning sign if several buttons in one email lead to the same URL. It also recommends checking whether the sender name, address, and domain line up, since display names can be spoofed even when the address looks internal.

Exposed credentials are giving attackers a head start many organizations don’t see

As the saying goes: modern attackers don't break in. They log in. Organizations should know this and act as if attackers are already in their systems.

From the article:

More than seven in 10 companies experienced an authentication-related incident during the past year, and two-thirds of the most recent incidents involved attackers signing in with valid credentials.

Exposed credentials often stay active long enough to be exploited, making early identification a key part of reducing credential-based risk.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 24th July 2026

Habdul Hazeez — Fri, 24 Jul 2026 21:20:08 +0000

All the articles that we are going to cover today have an element of Artificial Intelligence in them. You should not be surprised; AI is almost everywhere. Now, we'll take a look at what, without reading it, will look like it came out of a Sci-Fi movie, the dangers of searching for your favorite applications using a search engine, and AI going rogue, among others.

To think of it, when we talk about the popularity of AI, we are just in its infancy.

How a Stranger Used One Text Message to Steal My Entire Digital Life

Please, if you are going to read any article from start to finish in today's edition, it should be this. Reading through it will make it seem like a movie, but I bet you not. This is someone's life where they lost their identity and lots of money. The AI connection in it, the author turned to Anthropic's Claude to assist with something that the author was initially told was impossible.

Here is an excerpt from the article:

When I asked the caller to prove he was who he claimed to be, he did something that turned my stomach: he read my entire Social Security number and my date of birth back to me. That was the moment I knew my identity had been stolen. No honest caller needed to recite my full Social Security number to me; the only reason he had it was that he already had everything.

Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

When you read the term "sandbox" and you read an article like this, you just wonder: how did it happen? Well, it happened. This just shows you that if humans designed something to be locked down, we eventually find a way to unlock it for fun, or research purposes.

From the article:

The underlying class is not new. In April, Cymulate documented the same pattern, which it named "Configuration-Based Sandbox Escape," across Claude Code, Gemini CLI and Codex CLI, where a file written inside the sandbox runs on the host at the next launch.

What is new is the breadth. The same failure shows up across four tools from three vendors.

Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks

When I read an article like this, I ask myself one question: Given the effort that the attackers (in this case, the creator of the worm) put into developing this malware, why not use it to build a meaningful application? Because, read the following excerpt and tell me if you will not ask the same question:

SANDWORM_MODE spreads through three independent vectors, each exploiting a different credential type. With stolen npm tokens, it calls whoami to identify the compromised identity, enumerates all packages published under that account, injects the Stage 0 loader shim into each, and then runs npm publish to distribute infected versions to downstream consumers

When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover

What to take away from this article: when the so-called customer service calls you, disconnect and call their number. Why, it can be a spoofed call.

From the article:

The most important lesson from this incident is not that SIM swaps remain dangerous. It is that attackers increasingly chain together multiple identity attacks during a single engagement. Social engineering, credential theft, session hijacking, account manipulation, and recovery abuse are no longer isolated techniques. They are coordinated stages of a single identity attack campaign.

How OpenAI’s human mistake led to the AI-powered hack on Hugging Face

We all thought that it was impossible or that it could only happen in movies, in reality, we are seeing it play out.

ICYMI: An OpenAI model went rogue and attacked Hugging Face. This is the aftermath of that attack. I mean, it was not meant to happen. This article explains that human mistakes made the impossible possible.

From the article:

Daniel Card, a cybersecurity consultant, agreed that OpenAI “didn’t put adequate effort into the design of the sandbox nor its controls” by giving the sandbox or some part of it “an unfiltered route to the internet.” Setting up the sandbox, even with limited network access as OpenAI described it, was not a “reasonable” decision, according to Card.

How attackers hosted a fake Claude download page on the claude.ai domain

If you need that software, go to the official website by typing the URL in your web browser's address bar. Don't search it.

From the article:

A threat actor abused Anthropic’s Claude Artifacts feature to funnel users toward malware, Huntress researchers have disclosed.

In this particular case, the artifact to which potential victims were directed rendered a fully functional page that looked like a legitimate Claude download page, and the fact that it was hosted on the Claude.ai domain completed the illusion.

Clicking on the “Download” button redirected victims to an external domain, first claude.ai.download-app[.]us and subsequently downloading-api.it[.]com/html/claude/win, from which they downloaded a bundle.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 17th July 2026

Habdul Hazeez — Fri, 17 Jul 2026 22:25:45 +0000

In cybersecurity, attackers and defenders are always trying to beat each other. The former seeks new ways that can circumvent the defense put in place by the latter. It might look like in the movies, but in reality, there are lives, money, and reputation at stake. At the end of the day, it's good news when the defenders come out on top.

Now, defenders are embracing the prompt injection, too

That awesome moment when you turn the weapon against the attackers and you feel so good about yourself; this is an example. For months, we have read how attackers use prompt injections to bypass LLMs guardrails. Now, defenders are using it to shut them down!

Here is how the defenders pulled it off:

Researchers from Tracebit on Monday said they found that placing prompt injections alongside passwords, cryptographic keys, and other secrets stored on Amazon Web Services was often all that was needed to shut down attacks from AI hacking agents.

The prompts direct the attacking LLM to perform an action forbidden by its guardrails, the safety barriers AI developers erect to prevent it from taking harmful actions. The LLM responds by shutting down.

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

It's quite funny to read through the article. And I bet it will be frustrating for anyone who falls victim. I mean, a constant dialog box telling you to enter your password while at the same time killing some apps that will make you productive? And if you eventually type your password (which you should not), you hand over some personal details like Keychain, browser credentials, and crypto wallets to the attackers.

Here are the affected regions so far:

Group-IB's telemetry counts at least 100 targets across 33 countries since May, over half of them in Europe. Its analysts assume from the code structure that the malware is still under development. Uploaded to VirusTotal on June 9, the orchestrator script had zero detections there when Group-IB analyzed it.

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

For some while, ClickFix attacks have been in the news. This one is no different; I added it to further raise your awareness that the threat is still out there.

In the case of this TELEPUZ malware, here is how the attack works:

The ClickFix attack chain linked to TELEPUZ results in the execution of PowerShell, which downloads a second-stage payload from a remote URL and executes it.

The payload is a Go variant of the Vidar Stealer, which is known to harvest sensitive data from infected hosts and deploy secondary malware, in this case a stager binary that's responsible for launching TELEPUZ ("telepuz.dll") using "rundll32.exe."

Spirals ransomware locks down victim systems in under 24 hours

I know that it's just another ransomware. So, why is it special? Well, at the time of writing, there is only ONE confirmed victim. Therefore, by the time that you're reading this, there is possiblity of more victims.

Here is what's going on:

Spirals is written in Rust and encrypts files using a separate AES-128 key per file, each wrapped with an attacker-controlled ECDH P-256 public key. To speed up encryption, files larger than 5 MB are encrypted in chunks.

Victims were left with a ransom note, RECOVERY_SECTION.log, directing them to a Tor negotiation site and threatening to leak stolen data within six days if no payment was made.

The script, not the voice, is what makes AI voice phishing work

We have reached an age where you must not believe that the voice at the end of the end is who you think it is. If you work in an environment where you receive phone calls a lot, especially from a higher authority telling you to do some task, have a way to verify that it's really them. I will suggest, as also stated at the end of the article, something like a code word that only the two party knows, i.e., you and the person calling you.

From the article:

Industrial scam operations in Southeast Asia have run voice fraud at volume for years on labor costs nowhere near that. Vishing was economical before any of this. The change AI brings is the removal of language, staffing and geography as constraints, which is a different claim and a more defensible one.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 10th July 2026

Habdul Hazeez — Fri, 10 Jul 2026 21:21:42 +0000

This week's edition of our security review is all about the security challenges that arise from the use of Generative AI systems and AI Agents. By the looks of it, it's compulsory that if you're using these systems every day, you must know their security implications (that's if you don't know already). And if you're in the loop already, this should serve as a reminder of why you should take it more seriously.

Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments

It's my first time reading this kind of attack that uses prompt injection.

Here is what's going on:

Zscaler says it identified two campaigns relying on indirect prompt injection, including a payment scam hiding behind API documentation, and a typosquatting operation promoting a crypto platform that impersonates DeBank.

As part of the first campaign, the threat actor has been using SEO poisoning to target AI agents searching for the Python library requests-secure-v2.

As part of the second campaign, a threat actor is promoting a fraudulent website typosquatting the decentralized finance portfolio tracker DeBank. The indirect prompts used in this campaign tell the AI agents that the impersonating website is the legitimate DeBank domain.

CrowdStrike Uncovers New Prompt Injection Techniques

I am not surprised. I mean, as humans, when we notice that a system is deemed secure or at least, it was advertised that it does not allow certain things, we find a way to make it do that very same thing. While reading the article, I greatly admired the creativity of the prompt injection. It just shows you, and as things stand, GenAI systems can be tricked.

From the article:

Prompt injection is no longer just about obvious jailbreaks. Adversaries can manipulate AI systems through hidden context, delayed triggers, semantic constraints, boundary spoofing, formatting tricks, encoded payloads, and implied procedural knowledge.

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

A key lesson from this article: as a developer using Generative AI in your daily activities, always inspect the package names in the AI-generated code.

From the article:

The trap is not code that runs by itself. It works because these assistants keep a terminal among their built-in tools, so once the planted instructions take over, "install a bot" is simply something the assistant can do.

What makes it practical is that the fake names are not random. In the researchers' experiments, the mistake was consistent: across different phrasings and across models from different companies,

Why AI Governance Without Guardrails Is Theater

What I learned from this article is this: any organization that needs AI to work effectively for them, needs all hands on deck. No if's. No but's.

Here is why:

AI governance isn’t only about what’s allowed. It’s about what’s possible in the architecture, what’s safe in the threat model, and what’s useful to the business.

AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique

The title says it all. Now, the question: what made this possible?

Here you go:

Dubbed GhostApproval, the attack has been successfully tested against Claude Code, Amazon Q Developer, Cursor, Google Antigravity, Augment, and Windsurf.

In a GhostApproval attack, hackers plant a symbolic link in a seemingly benign repository that masquerades as a normal project file but actually points to a sensitive location outside the workspace.

When a developer opens the repo in an AI coding assistant and instructs it to make edits, the agent follows the symlink and performs the write on the target specified by the attacker.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 3rd July 2026

Habdul Hazeez — Fri, 03 Jul 2026 21:22:50 +0000

The imperfections of humans mean we will always create applications and software with vulnerabilities. With the rise of GenAI applications, chatbots tend to be a "yes man" or aid attackers in the creation of malware. At the end of the day, it's interesting to know that you can catch a ransomware before it detonates.

Sycophantic chatbots and the harms that build over many chats

Chatbots like ChatGPT tend to agree with you all the time, even when they are wrong. And if you catch them lying, they'll just say: Nice catch. It's annoying, but it's our current reality. Meanwhile, the consequences can be far-reaching as detailed in this article.

From the article:

The strongest evidence concerns harm that accumulates across many interactions. Molly Russell, a 14-year-old from London, died in 2017 from an act of self-harm after viewing large amounts of depression, self-harm, and suicide content on Instagram and Pinterest.

Sycophancy gives these systems a steady tendency to agree with users and validate them, accuracy aside. Analysis of more than 391,000 messages from users who had poor outcomes found sycophantic behavior in more than 70% of messages.

BlueHammer Vulnerability Exploited in Ransomware Attacks

At the time of writing, Microsoft has patched the vulnerability. But, that does not mean that everyone has updated their Windows devices.

From the article:

CISA added BlueHammer to its Known Exploited Vulnerabilities (KEV) catalog on April 22 and the agency has now updated the entry to specify that the weakness has been leveraged in ransomware campaigns.

Advertisement. Scroll to continue reading.
It’s unclear which ransomware group has exploited CVE-2026-33825; there do not appear to be any recent reports describing its exploitation.

AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android

If you're looking for the not-so-good usage of GenAI, this is it. Just like most things created by man, it can be used for unintended purposes.

From the article:

The identified sample is a Python Flask application named "deepseek_python_20260125_da0631.py" that was uploaded to VirusTotal on January 25, 2026, with the Google-owned malware scanning service describing it as a "fully functional information stealer and ransomware toolkit."

The application is designed to operate as a malicious web server that lures victims with a fake Discord avatar AI upscaler, while stealthily running a wide array of harmful actions, including stealing Discord tokens, harvesting credit card numbers and cryptocurrency seed phrases, logging keystrokes, and capturing unauthorized webcam and microphone feeds.

Catching ransomware on the wire before it locks the file server

Simple explanation: Your behavior can give away your motives.

Here is how they achieved it:

The framework runs in three stages. The first two compare traffic against known indicators of compromise, including the size of the ransom note a family writes to a victim’s drive. Each family drops a note of a recognizable size, which serves as a fingerprint.

Traffic that passes those checks moves to a machine learning model trained to catch families the signatures miss.

The model the team selected, a Random Committee classifier, reached an accuracy of about 99.6% on their test data. The authors report that it caught every ransomware sample in their tests, and false positives stayed rare.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 26th June 2026

Habdul Hazeez — Fri, 26 Jun 2026 20:52:27 +0000

When we think that we are safe, that's when we should be on the alert. Or, maybe, just check if you're truly safe. You never know, attackers may be lurking in your system, copying files as you read this, and waiting to detonate that ransomware followed by their demands.

We just need to be vigilant. If you design a system as "safe", have it at the back of your mind that someone can break it. It's not a matter of "if", it's "when". This mindset ensures that nothing catches you by surprise. And in the intense atmosphere where your company is responding to a cyber incident, your level of calmness will be unmatched. That's because you knew that days like this are inevitable.

I welcome you all to this week's edition of our security review here on DEV.

A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak

When I read "unpatchable flaw", I was muted.

Here is what's going on:

On Friday, Paradigm Shift, an offensive cybersecurity company based in Barcelona, published a blog post about the vulnerability, which it dubbed “usbliter8.” The company also published a proof of concept that shows how to exploit the vulnerability, which requires physical access to the target phone.

The flaw and related exploit affect iPhones that have Apple-made chips A12 and A13, which were released in 2018 and 2019, and are included in older iPhones such as the XS, XR and up to the iPhone 11.

WhatsApp phishing attack uses fake business docs to hack PCs

While reading the article, I thought to myself that no tech-savvy individual will fall for this attack. Because, who will read a file name that's supposed to be a document and ends with .vbs? Then I remembered not everyone knows this, and they can fall victim. Also, even if you're tech-savvy, a slight dip in attention, can actually cause you to fall victim.

Here is what's going on:

The threat actor is using file names that indicate business and financial documents delivered by the victim's contacts, whose accounts had been compromised.

These files are given names that make them appear to be financial reports, billing statements, account notices, and similar documents likely to draw the target’s attention and prompt them to open the file.

Phishing hides in routine Microsoft 365 workflows

Falling victim to a phishing attack where you least expect it, can haunt you for a very long time. I mean, you'll keep asking yourself: how did they do it? I did not click on any phishing link! Just how?

From the article:

The attack begins when a target is added to or invited into an attacker-controlled Microsoft 365 Group. The group’s name, description, or welcome message is designed to create urgency, often using themes such as payroll updates, contract renewals, supplier requests, or mandatory training notices.

Follow-up content is delivered through the group mailbox, shared files, or calendar invitations, often using one of four CalPhishing techniques. CalPhishing, short for Calendar Phishing, uses Outlook and Microsoft 365 calendar features to deliver phishing lures through meeting invitations and .ics files that can place events directly on a victim’s calendar.

New ‘Mistic’ RAT Opens Door to Several Ransomware Families

Don't be surprised that cyber criminals work together. If you are, this is one example that it's happening.

From the article:

The threat actor, tracked as Woodgnat and KongTuke, and active since at least May 2024, is known to have ties to ransomware groups such as Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta.

Also tracked as MLTBackdoor, Mistic provides attackers with typical capabilities, including file download and upload, file manipulation, folder creation, and code execution. The attackers can also modify the frequency at which the malware checks for new commands and can instruct it to terminate itself.

The Identity Problem Hiding in AI Agent Deployments

When you know who is who in a system, you still have to ensure that they don't exploit their access. Now, what happens when you know of an Agent that accessed a system access but you don't know the relationship between that Agent and who granted it that access? This and more is what the article is trying to explain and ways to navigate the situation.

From the article:

Even when we specify both identities, the relationship between the user and the agent is not captured anywhere.

The relationship between Claude Code and the programmer who initiated a task that caused Claude Code to get a token to access GitHub, for example, is very different from the relationship an autonomous agent has with the user whose HR case it picks up in its workflow.

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

It only takes one decision, and such capabilities can allow the developers of the extension to do whatever the devices. The question is: why was it there in the first place?

From the article:

It's worth emphasizing here that there is no evidence malicious payload has been distributed to users in this manner, but the mere presence of the capability, coupled with ties to other ad-blocking extensions that have since been removed from the storefront for malware, raises privacy and security risks

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 19th June 2026

Habdul Hazeez — Fri, 19 Jun 2026 21:35:03 +0000

Defenders don't rest. They wake up every day thinking about how to protect the systems that they are charged to protect. Meanwhile, attackers are also looking for crafty ways to infect a system or break into computer networks. In the end, it's good for everyone if defenders are always one step ahead of the attackers.

EvilTokens: A phishing attack that doesn’t steal your password

A phishing attack that does not require creating fake login pages or stealing your passwords. I was speechless when I read the article's title and deservedly so when I read how the attackers executed the attack.

The following should get you started:

EvilTokens is a phishing-as-a-service (PhaaS) kit built to compromise Microsoft 365 accounts by abusing the OAuth 2.0 device authorization grant flow.

As attacks that use the kit rely on device code phishing, they sidestep the need for convincing replicas of genuine login pages where the victims would hand over their passwords.

Instead, attackers get the victim to complete a legitimate authentication process – including two-factor authentication (2FA) – on a real Microsoft login page.

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

The good news is that MSFT mitigated the flaw. What's left for tenant admins is to watch and contain. The interesting thing is how the researchers pulled off the attack.

Here is what they did:

Researchers at Varonis Threat Labs chained three bugs into a one-click exfiltration path they call SearchLeak. Because the link pointed to a real microsoft.com domain, traditional anti-phishing and URL filtering tools were unlikely to flag it.

The entry point is the q parameter in the Copilot Enterprise Search URL. It is meant for a natural-language query, but Copilot reads whatever sits there as instructions, not just a search string. Varonis calls this Parameter-to-Prompt injection.

Low-skilled attacker used Claude, Codex to breach 14 companies

The barrier to entry into cybercrime has never been this low. And what's reported in this article proves that. Also, you'll expect that since the attacker is tagged a low-skilled attacker, that they will make rookie OPSEC mistakes, yes they did.

From the article:

“In many cases, the attacker supplied only vague, low-skill prompts and allowed Claude to fill in the gaps: researching exposed services, identifying possible vulnerabilities, writing exploit code, validating access, and harvesting data,” the researchers noted.

“The attacker did not need to be an expert operator; they simply had to use the correct framing for their prompts. The agent supplied much of the structure and technical execution that the attacker appeared to lack.”

Massive breach spills credentials for thousands of sensitive networks

Just when you think: We are safe, we have firewalls and the big tech guys to protect our infrastructures. Then you read an article like this and you almost give up, thinking: Which system is safe?

Here is what's going on:

“The scale of this breach touches nearly every sector of the global economy, sparing no industry,” researchers from Hudson Rock, a security firm that also analyzed the data, wrote. “The threat actors have built a verified database of working credentials for some of the largest enterprises on the planet.”

Rokarolla Android trojan targets banking and crypto users, enables device takeover

Android Trojans and their funny names are something else. The article's title clearly states what the Trojan does. One thing that surprises me every time I read an article like this: given the amount of effort that the developers put into this malware, can't they put the same effort into developing an application that they can somehow monetize? Or, something like that?

I mean, read the following

“Its malicious capabilities include harvesting lock screen credentials, exfiltrating sensitive contact lists and SMS data, and utilizing keyloggers to continuously record user input,” the researchers said.

“Furthermore, the trojan actively conceals its operations and disrupts user intervention by blocking incoming calls, deploying fraudulent screen overlays, suppressing device audio, and deactivating Google Play Protect.”

USB worm spreads crypto-stealing malware via Windows shortcut files

I don't know. At the end of the day, and most of the time, some malware are just after stealing something from an infected system. This is yet another example.

From the article:

The campaign has been active since at least February and relies on LNK (shortcut) files on USB drives to push clipper malware that monitors clipboard contents and replaces cryptocurrency wallet addresses with ones controlled by the attacker.

Microsoft says that the infection process starts with the victim opening the LNK file, triggering the malware on the USB drive. Additional payloads are staged from a .ONION address.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 12th June 2026

Habdul Hazeez — Fri, 12 Jun 2026 20:46:37 +0000

Most of the security threats that we face today come from online sources. I mean, the moment we switch on our devices and click "connect", we walk into a world where we can be vulnerable to threats that we cannot even fathom. Yet, we trust our instincts that I will be fine. Sometimes, that turns out to be the case. Most of the time (ask those who have been victims), it's not always the case.

One wrong move and we could be toast. Searching for that thing on your favorite search engine? In the search results, you could end up clicking on a malware-laden site or a phishing site using a typosquatted domain name. Or, you have vulnerable software and an exploit is already available waiting for a target to come online, and just like that, your system is owned.

The list is endless. Nonetheless, we still connect to the internet and for the security-minded person, hope and pray for the best.

FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins

TL;DR: In the season of the World Cup 2026, there are scam sites out there ready to steal your financial and identity details. To prevent this, go to FIFA's website directly by typing the address in your web browser's address bar and hitting the enter key on your keyboard. This means do not search for anything related to tickets or stuff like that on Google (or your favorite search engine).

You have been warned.

Everybody Is Vibe Coding But Nobody Told the Security Team

I wish they did. Wait. Let me take that back. They should tell the security team! Why? These vibe-coded applications are ending up in Google Search results.

Here is what I am saying (emphasis mine):

Researchers at RedAccess recently analyzed thousands of vibe-coded applications built on Lovable, Replit, Base44, and Netlify. They found more than 5,000 with virtually no security or authentication. Around 40% exposed sensitive data — medical information, financial records, corporate strategy documents, detailed customer conversation logs.

Among verified exposures: a shipping company app detailing vessel port arrivals; an internal health company application listing active UK clinical trials.

Cybercriminals: the 'auditors' you never hired

Nonetheless, they are at your door scanning and probing where the loopholes are. If they do find one, you might find out after the damage is done.

From the article:

There’s one cognitive bias that we humans are prone to, and it lies at the centre of some of the challenges that cybersecurity professionals face every day. It’s known as the normalcy bias

As this bias can lead us to mistake familiarity for safety and assumptions for evidence, it’s increasingly getting in the way of dealing with the cybersecurity reality. It causes people to underestimate the likelihood of a cyberattack or to interpret an absence of obvious problems or consequences as evidence that risks are under control.

Infostealers Turn Millions of Devices Into Credential Theft Machines

To add to the article's title: Without you even knowing. I know you might say: of course that's how infostealers work! Yes, I know. I just couldn't help myself but say it out loud.

From the article:

Stealers are available on the underground ecosystem, often via malware-as-a-service (MaaS) and for hire at as little as $60 per month. During 2025, the most successful stealers, in order, were Lumma, Acreed, Rhadamanthys, Vidar, and StealC.

When attackers acquire a stealer, they must then infect a target device. This could usually be any device connected to the network he intends to raid since secrets available here would provide access to other parts of the network.

Oracle warns of security bug that hackers abused to breach 100+ companies

At the time of writing, it's a zero-day bug. Meaning: no patches available only mitigations.

From the article:

Oracle, which has not released a patch for the vulnerability at the time of writing, said in the advisory that the bug can be exploited over the internet without needing any authentication, such as a password.

Japanese energy firm loses drive with data of 10.9 million clients

They stored the stolen data on a drive. Locked it in a server room cabinet that is behind many physical security layers. Yet, someone got in, took the data, and at the time of writing, they have not located the person nor the data.

From the article:

The data present on the now missing drive includes:

Customer names

Service location addresses

Electricity usage data

Telephone numbers

Names of retail electricity providers

Other related information

The firm has clarified that no bank account information or credit card data was stored in the drive. It also promised to notify impacted customers individually in the upcoming period.

Alert Fatigue Is Becoming a Security Threat of Its Own

TL;DR: When alert is too much, it can be a problem.

From the article:

Alert fatigue isn’t caused by occasional long hours and stress – it is caused by continuous long hours and continuous stress with no escape. If it isn’t prevented, the effect on the analyst could begin with a few missed false negatives and grow into a full business compromise.

For the analyst, it could start with subconscious, but overly aggressive filtering merely designed to keep up with the volume of fresh alerts. Within this filtering, too many alerts may be assumed to be false positives. Many will be but some may not, and true positive signals may be filtered out as noise.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 29th May 2026

Habdul Hazeez — Fri, 29 May 2026 22:40:28 +0000

Malware and vulnerabilities are the stuff of nightmares for any security-conscious internet user. If you add, privacy invasion into the mix, it gets worse. I mean: a website spying on you using activities of your SSD can sound like a script from your favorite Sci-fi movie. However, it's reality.

Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise

The FIFA World Cup season is around the corner. Be careful of any random search while looking to buy tickets and some merchandise. Go to the official website. Do not search on Google.

From the article:

Indeed, many sites set up in the run-up to major events will rely on a common trick known as typosquatting, which involves on a domain name that closely resembles the legitimate one, but contains small additions or involves other changes in the domain name that the victim often won't notice.

These special phone and app features can help protect you from spyware

If you feel that you are targeted you think you could be in the future, go through the article. It covers how to get it done on your iPhone and Android devices.

The following should get you started:

Generally speaking, these features add extra protection, sometimes by turning off or limiting some regular features. It’s a tradeoff

No security measure is perfect, and it’s a constant effort to keep security flaws at bay. But that doesn’t mean these features are not worth using. On the contrary; these features have been proven effective.

AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites

Do not use AI chatbots for searching for download links on the Internet. If you think that's too much to ask, read the article.

From the article:

It all begins when users search for trusted system utilities and hardware-monitoring software on search engines, which surface malicious sites that have been gamed via techniques like search engine optimization (SEO) poisoning.

Each of these sites contains a prominent download button that retrieves a ZIP archive from a campaign-specific subdomain of gleeze[.]com, which is hosted by infrastructure associated with Dynu, a dynamic DNS provider frequently used by threat actors.

Websites have a new way to spy on visitors: Analyzing their SSD activity

Among the things that I can never think would be possible while browsing on the web, this is going to be among the top 10. While reading, it reminds me of https[://]browserspy[.]dk

From the article:

The technique, named FROST (fingerprinting remotely using OPFS-based SSD timing), allows sites to monitor other sites a visitor is viewing and what apps are open on their devices.

The technique, laid out in a research paper, exploits a side channel, a form of leak resulting from physical manifestations such as electromagnetic emanations, data caches, or the time required to complete a task. By measuring the manifestations, attackers can decrypt encrypted traffic and infer other confidential data.

New BTMOB Android Malware Enables Full Device Takeover

Another Android malware that you and I have to think about. Like previous documented Android malware, this one also abuses the Accessibility Services on the device.

Here is how the malware spreads, and what it can do:

Threat actors have been observed delivering phishing messages that point victims to websites posing as legitimate services, which redirect to fake application stores mimicking legitimate repositories and serving the malicious APK.

Unlike banking trojans, which ‘only’ aim to steal people’s financial credentials or intercept their financial transactions, BTMOB gives adversaries broader options: exfiltrate a range of sensitive data, capture screenshots and record activity on the device, and ultimately take remote control of it.

Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code

It can be funny when you read the title. However, it wouldn't be funny if you end up being a victim.

From the article:

The addition was a prompt injection, a form of AI attack that exploits an LLM’s inability to distinguish between legitimate user prompts and those from unauthorized, potentially malicious third parties. AI coding agents that were vulnerable would then delete work product produced by the testing app.

The reception to the discovery has been chilly. One discussion participant called the move “childish,” while another one questioned its legality in some jurisdictions.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 22nd May 2026

Habdul Hazeez — Fri, 22 May 2026 21:15:56 +0000

Security lapses, an almost a decade-old vulnerability are among the topics that we're going to review this week. From all the articles that we'll review, one thing is common: humans are not perfect and sometimes we need constant reminders to let us know what to do and when to do it.

9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

I would like to know the cause behind the surge of Linux vulnerabilities in the past few months. We have had CopyFail, Dirty Frag, Fragnesia, and now this? Does it have anything related to Anthropic's Mythos? Anything? Let me know in the comments section.

Now, speaking of the article. The title is a good summary of the vulnerability, and the following excerpt tells you more:

The vulnerability, tracked as CVE-2026-46333 (CVSS score: 5.5), is a case of improper privilege management that could permit an unprivileged local user to disclose sensitive files and execute arbitrary commands as root on default installations of several major distributions like Debian, Fedora, and Ubuntu.

Scammers are abusing an internal Microsoft account to send spam links

This type of incident reminds me of the following: always verify everything you read in your email even if it appears to come from a "trusted" source. Imagine seeing an email that appears to be from MSFT and it's from scammers!

From the article:

This is the latest in a rash of incidents in which hackers or scammers have abused company systems to trick unsuspecting customers in recent months. Earlier this year, hackers broke into a platform used by fintech firm Betterment to send out fraudulent notifications that purported to triple the value of any crypto users send in — a widely known scam used to steal people’s cryptocurrency.

How to Protect Identities and Sessions from Infostealers

Infostealers. I don't know what to say. This blog from CrowdStrike details the danger they pose to your system, your life, and how to protect yourself.

From the article:

An infostealer is a type of malware specifically designed to do what its name suggests: steal sensitive information. Often deployed through phishing emails, malicious downloads, compromised websites, or exploited vulnerabilities

The impact of an infostealer attack can be devastating. Because infostealers quietly extract sensitive data, organizations often remain unaware until significant damage has been done.

CISA Admin Leaked AWS GovCloud Keys on Github

When I saw the article's title, I read it all. I kept wondering: how did it happen? I mean, you work for CISA and you put stuff like this in a public GitHub repo and ironically you name it "Private CISA". This is beyond me.

From the article:

One of the exposed files, titled “importantAWStokens,” included the administrative credentials to three Amazon AWS GovCloud servers. Another file exposed in their public GitHub repository — “AWS-Workspace-Firefox-Passwords.csv” — listed plaintext usernames and passwords for dozens of internal CISA systems.

I honestly believed that it was all fake before analyzing the content deeper. This is indeed the worst leak that I’ve witnessed in my career.

Why geopolitical turmoil is a gift for scammers, and how to stay safe

When something is happening in the world and it's everywhere like in the news, the papers, e.t.c., you name it. Scammers tend to use such situations to compromise unsuspecting users. That's why you need to control or should I say keep your emotions "in check" when global events happen. Whether you like what's going on or not, do not be quick to react when you're online or offline.

From the article:

A good rule of thumb is never to click on links or open attachments in unsolicited messages, even if they look convincing and appear as if sent from a trusted source.

If you really want to know if it’s a genuine message or not, check independently with the sender; i.e., don’t reply directly or use contact details in the message itself. Or if it’s a news story, go direct to your favored news outlet.

Be cautious of social media accounts, especially those that appear to be customer service accounts for airlines and the like. These are easier than you’d think to set up and platform providers are always a step behind in taking them down.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.

Security news weekly round-up - 15th May 2026

Habdul Hazeez — Fri, 15 May 2026 21:24:36 +0000

Malware and vulnerabilities dominate our review this week. This shows that humans always create bad stuff and what we create is not always perfect, hence, a vulnerability can exist in our software and applications.

Hackers abuse Google ads, Claude.ai chats to push Mac malware

When you search for anything online with the hope of getting a download link, be cautious of the link that you click on.

From the article:

Users searching for "Claude mac download" may come across sponsored search results that list claude.ai as the target website, but lead to instructions that install malware on their Mac. The chat walks users through opening Terminal and pasting a command, which silently downloads and runs malware on their Mac.

Researcher Drops YellowKey, GreenPlasma Windows Zero-Days

If I remember correctly, we wrote something about this same researcher some weeks ago. It's the same reason why they did this: frustration about the way MSFT handled the vulnerability disclosure. And, now, they have done another one!

From the article:

According to the researcher, the underlying issue for YellowKey is a well-hidden vulnerability without an explicit root cause, and could be a backdoor intentionally planted into BitLocker.

The second zero-day Windows exploit dropped by Chaotic Eclipse is named GreenPlasma and allows attackers to elevate their privileges to System. The researcher published a PoC exploit stripped of the code required to achieve a full System shell.

OpenAI says hackers stole some data after latest code security issue

By the looks of things, it's nothing that serious. I mean really serious. It's not something that you'll think: Oh, OpenAI is in big trouble, or that kind of thing.

From the article:

According to the AI giant, “only limited credential material” was taken from the affected code repositories. As a precaution, given that the affected repositories contained digital certificates used to sign OpenAI’s products, the company said it’s rotating the certificates “as a precaution,”

New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation

With the back-to-back public announcement of Linux vulnerabilities, will this Operating System catch a break anytime soon? We'll see.

From the article:

Dubbed Fragnesia and officially tracked as CVE-2026-46300, the issue resides in the kernel’s XFRM ESP-in-TCP subsystem, allowing an unprivileged attacker to gain root permissions by overwriting sensitive system files. Fragnesia is in the same class of vulnerabilities as the recently disclosed Dirty Frag and Copy Fail.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.