/
initial_access_vector:clickfix × latest_source_host:bleepingcomputer.com × limpar

Resultados

3 casos · pág. 1/1

bleepingcomputer.com · · 5 fontes · 6 atualizações critical

Plex2Shell: Plex Media Server exploit chain exploited within a day of PoC to drop XMRig and myawesomeproxy; CISA adds four CVEs to KEV

Attackers began exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656), on October 17, 2026. That was about a day after researcher Zach Main published a write-up on October 16, with a PoC following (bleepingcomputer.com dates the PoC to October 19, three da…

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 government
bleepingcomputer.com · medium

Sponsored analysis: stolen GitHub tokens, ClickFix lures for Claude Code and help desk vishing enable data theft within minutes

A vendor-sponsored analysis by Exaforce (published on bleepingcomputer.com) says attackers are enumerating or exfiltrating data within about 15 minutes of gaining access. It describes three patterns: stolen developer GitHub OAuth tokens, ClickFix lures that impersonate Claude Code install instructions to deliver a macOS stealer, and help …

Scattered Spider technology software development
bleepingcomputer.com · · 5 fontes · 5 atualizações medium

Google adds ClickFix clipboard warnings and Gemini scam detection to Chrome Enhanced Protection; Apple blocks email identity resolution in Safari 27

On October 20, 2026, Google announced new Chrome defenses for users of Safe Browsing Enhanced Protection. They include a warning against ClickFix social engineering, in which suspicious commands copied by the user are scrubbed of personal information and sent to Safe Browsing for analysis (thehackernews.com, gbhackers.com, securityweek.co…