/
initial_access_vector:malvertising × latest_source_host:bleepingcomputer.com × limpar

Resultados

3 casos · pág. 1/1

bleepingcomputer.com · · 3 fontes · 3 atualizações high

Railway PaaS breach exposes customer environment variables and secrets; deployments paused, wallets drained, all users told to rotate keys

Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" on the systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and, in some cases, obtained the decrypted contents (thehackernews.com, techcrunch.com, bleepingcomputer.com). Railway detected the activity e…

technology cloud
bleepingcomputer.com · high

ClickFix surges to 52% of Push detections, with fake AI tool lures (InstallFix, LLMshare) delivering malware via search ads

ClickFix and its variants (FileFix, InstallFix, TerminalFix, ConsentFix) are now the most common browser-based attack technique seen by Push Security. They averaged 52% of Push detections through Q2 2026 and reached 67% in August, overtaking AiTM and device code phishing. The newest lures impersonate AI tools: ANY.RUN linked 1,258 public …

APT29 financial services technology
bleepingcomputer.com · · 5 fontes · 5 atualizações medium

Google adds ClickFix clipboard warnings and Gemini scam detection to Chrome Enhanced Protection; Apple blocks email identity resolution in Safari 27

On October 20, 2026, Google announced new Chrome defenses for users of Safe Browsing Enhanced Protection. They include a warning against ClickFix social engineering, in which suspicious commands copied by the user are scrubbed of personal information and sent to Safe Browsing for analysis (thehackernews.com, gbhackers.com, securityweek.co…