Thousands of compromised websites abused by DriveSurge in active ClickFix and FakeUpdates campaigns

SilentPush is warning about an Intial Access Broker campaign called DriveSurge that uses thousands of websites to deploy a backdoor.

The Manhattan Institute Helped Kill DEI. Now It’s Coming for Protests

The right-wing think tank is actively pushing “civil terrorism”—increasing penalties for minor crimes committed while people engage in constitutionally protected free speech.

Meta’s own AI was exploited to hijack Instagram accounts
Meta’s own AI was exploited to hijack Instagram accounts

Meta’s AI support chatbot helped hackers hijack Instagram accounts, as reported earlier by 404 Media. In a video shared on Telegram, a hacker shows how they could take over an account by asking Meta’s chatbot to switch the email associated with someone else’s profile and then reset the password. The issue, which Meta says has […]

A WordPress plugin sold to 15,000 sites has a flaw that lets anyone create an admin account, and attackers are already using it
A WordPress plugin sold to 15,000 sites has a flaw that lets anyone create an admin account, and attackers are already using it

A critical vulnerability in WP Maps Pro, a commercial WordPress plugin with more than 15,000 sales on the Envato Market, is being actively exploited by attackers to create malicious administrator accounts on vulnerable sites. The flaw, tracked as CVE-2…

OpenAI Codex tool with over 29,000 downloads linked to malicious npm supply chain attack stealing authentication tokens

A tool started benign and turned sour after a little while, stealing tokens and granting persistent access.

A GTA V cheat service that promised “enhanced privacy” just got hacked, exposing 64,000 accounts
A GTA V cheat service that promised “enhanced privacy” just got hacked, exposing 64,000 accounts

Atlas Menu, a cheat service for Grand Theft Auto V’s online mode, has been hacked, exposing the personal data of nearly 64,000 users. The stolen data included email addresses, usernames, hashed passwords, IP addresses, and support tickets, according to…

Hackers hijacked Instagram accounts by tricking Meta AI support chatbot into granting access

Several users on social media reported having their Instagram accounts hacked over the weekend. Meta’s own support chatbot was blamed for allowing hackers to hijack accounts.

Multiple Linux distros hit by major ‘CIFSwitch’ flaw that gives attackers root access

If you’re using Linux, make sure you patch up and disable unnecessary file sharing features.

Grand Theft Auto V cheat service gets hacked, exposing thousands of gamers

Hackers stole usernames, hashed passwords, and other data from a service that allowed players to cheat in Grand Theft Auto V.

Florida becomes the first state to sue OpenAI, naming Altman personally and calling ChatGPT a defective product
Florida becomes the first state to sue OpenAI, naming Altman personally and calling ChatGPT a defective product

Florida has sued OpenAI and CEO Sam Altman in what appears to be the first lawsuit by a US state against the maker of ChatGPT. The civil complaint, filed Monday in state court by Attorney General James Uthmeier, accuses OpenAI of violating product liab…