Malicious Extension Swaps Crypto Wallet Addresses
Cybersecurity researchers have uncovered a sophisticated campaign distributing a malicious Chromium-based browser extension that silently replaces cryptocurrency wallet addresses during transactions. Disguised as a lightweight "Google Notes" extension, the malware [...]
Hackers Exploit Claude Code to Take Over Systems
Researchers from Mozilla's Zero Day Investigative Network (0DIN) have demonstrated a proof-of-concept (PoC) attack showing how a seemingly harmless GitHub repository can manipulate AI coding assistants such as Claude Code [...]
WhatsApp Introduces Usernames for Private Messaging
WhatsApp has introduced a new username feature designed to improve user privacy by allowing people to communicate without sharing their phone numbers. The update marks one of the platform's most [...]
Langflow Vulnerability Deploys Monero Miner
Cybersecurity researchers have identified an active campaign exploiting CVE-2026-33017, a critical remote code execution (RCE) vulnerability in Langflow, to compromise internet-facing AI servers and deploy a customized Monero (XMR) cryptominer. [...]
Splunk Secure Gateway RCE Vulnerability Discovered
A high-severity vulnerability, CVE-2026-20251, has been identified in Splunk Secure Gateway (SSG), potentially allowing authenticated users with low-level privileges to execute arbitrary code on affected systems. The flaw carries a [...]