August 5, 2026

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt 2026-08-05 at 23:27 By Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on underground cybercrime forums and messaging platforms. One such service, Poison Claude, claims to offer access to Anthropic’s large language models […]

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports 2026-08-05 at 23:27 By Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures 2026-08-05 at 21:44 By A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks. The server-side gate

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes 2026-08-05 at 21:33 By OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, gambling, and law enforcement impersonation schemes. To that end, it banned a coordinated network of

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses 2026-08-05 at 18:55 By Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer. The new dead drop resolver approach, observed in two trojanized

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug 2026-08-05 at 17:27 By HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam’s console that hands over a managed agent’s credentials,