Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Magecart Attacks and Fake Browser Update Campaigns Target Users * Magecart attacks are resurging, utilizing malicious JavaScript injection on e-commerce sites to skim payment card data directly from user browsers. * A new macOS information stealer, Atomic Stealer (AMOS), is being distributed via
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Microsoft Edge Introduces Protected Clipboard for Data Loss Prevention * Microsoft Edge will gain a new Protected Clipboard feature aimed at preventing unauthorized applications from accessing sensitive data copied by users. * This security enhancement integrates with Microsoft Purview Data Loss Prevention (DLP)
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts * Researchers identified five malicious Chrome extensions impersonating popular business tools like Workday and NetSuite, designed to steal user credentials. * These extensions used a technique to dynamically inject JavaScript into legitimate login
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 New One-Click Microsoft Copilot Vulnerability Grants Attackers Access to Sensitive Data * A "Reprompt" vulnerability in Microsoft Copilot allows attackers to exfiltrate sensitive user data with a single click via prompt injection techniques. * The flaw exploits browser-integrated AI, manipulating the
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Long-Running Web Skimming Campaign Targets Online Checkout Pages * A persistent web skimming campaign, active for over two years, has been identified, targeting online e-commerce checkout pages to steal payment card information. * Attackers inject malicious JavaScript code into legitimate websites, which intercepts
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Widespread Campaign Exploits LLMs Through Web-Based Prompt Injection * Threat actors are conducting widespread campaigns exploiting Large Language Models (LLMs) through techniques like prompt injection, data exfiltration, and model manipulation. * These attacks frequently leverage web application interfaces, using browsers as the primary
Phishing
This newsletter is AI generated and may hallucinate sometimes 😊 New 'Greatness' Phishing-as-a-Service Platform Emerges Targeting Microsoft 365 Users * The "Greatness" Phishing-as-a-Service (PhaaS) platform is actively being offered to threat actors, providing advanced phishing kits to facilitate credential harvesting. * This platform specifically targets Microsoft 365 users, employing
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 References
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Chrome “WebView” Vulnerability Allows Hackers to Bypass Security Restrictions * A security flaw in Google Chrome's "WebView" component was reported, enabling attackers to bypass crucial security restrictions within applications that embed WebView. * This vulnerability could potentially allow for
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Malicious Chrome Extensions Steal ChatGPT and DeepSeek AI Chats from 900,000 Users * Two Chrome extensions, "ChatGPT for Google" and "Quick access for ChatGPT," were found actively stealing user data, including session tokens and chat histories, from
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 DarkSpectre Campaign Weaponizes 8.8 Million Browser Extensions for State-Aligned Espionage * A state-aligned Advanced Persistent Threat (APT) group, DarkSpectre, has compromised over 8.8 million browser extensions across major browsers including Chrome, Firefox, Edge, and Brave. * The weaponized extensions were used
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 * A cross-site scripting (XSS) vulnerability was reported in Roundcube Webmail, which allows attackers to take over user email accounts. * The flaw enables an attacker to compromise accounts by sending a specially crafted email message that, when viewed, executes arbitrary code within