4 casos · pág. 1/1
On October 20, 2026, Google announced new Chrome defenses for users of Safe Browsing Enhanced Protection. They include a warning against ClickFix social engineering, in which suspicious commands copied by the user are scrubbed of personal information and sent to Safe Browsing for analysis (thehackernews.com, gbhackers.com, securityweek.co…
Attackers began exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656), on October 17, 2026. That was about a day after researcher Zach Main published a write-up on October 16, with a PoC following (bleepingcomputer.com dates the PoC to October 19, three da…
ClickFix and its variants (FileFix, InstallFix, TerminalFix, ConsentFix) are now the most common browser-based attack technique seen by Push Security. They averaged 52% of Push detections through Q2 2026 and reached 67% in August, overtaking AiTM and device code phishing. The newest lures impersonate AI tools: ANY.RUN linked 1,258 public …
A vendor-sponsored analysis by Exaforce (published on bleepingcomputer.com) says attackers are enumerating or exfiltrating data within about 15 minutes of gaining access. It describes three patterns: stolen developer GitHub OAuth tokens, ClickFix lures that impersonate Claude Code install instructions to deliver a macOS stealer, and help …
