/
latest_source_host:bleepingcomputer.com × criticity:high × victim_sectors:technology × limpar

Resultados

3 casos · pág. 1/1

bleepingcomputer.com · high

ClickFix surges to 52% of Push detections, with fake AI tool lures (InstallFix, LLMshare) delivering malware via search ads

ClickFix and its variants (FileFix, InstallFix, TerminalFix, ConsentFix) are now the most common browser-based attack technique seen by Push Security. They averaged 52% of Push detections through Q2 2026 and reached 67% in August, overtaking AiTM and device code phishing. The newest lures impersonate AI tools: ANY.RUN linked 1,258 public …

bleepingcomputer.com · high

OpenCode breach exposes users' linked AI provider API keys during large-scale distillation attack, causing unauthorized charges

The open-source AI coding agent OpenCode disclosed a breach tied to a "large-scale distillation attack" that exposed stored external-provider API keys for 1.4% of OpenCode Console users. Affected users had linked providers such as Anthropic, OpenAI and Google. Users reported unauthorized charges ranging from several hundred USD to more th…

bleepingcomputer.com · high

Onamae Desktop Cloud (GMO Internet) breached; malware installed on up to 26,739 customer VPS servers

Hackers compromised the infrastructure of Onamae.com Desktop Cloud, a VPS service operated by GMO Internet in Japan, and installed malicious programs on up to 26,739 customer servers. The company confirmed the intrusion on October 20, 2026. It began progressively shutting down customer servers at 04:00 local time on October 21, and all De…