2026

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports 2026-08-05 at 23:27 By Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious […]

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures 2026-08-05 at 21:44 By A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks. The server-side gate […]

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes 2026-08-05 at 21:33 By OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, gambling, and law enforcement impersonation schemes. To that end, it banned a coordinated network of […]

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses 2026-08-05 at 18:55 By Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer. The new dead drop resolver approach, observed in two trojanized […]

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug 2026-08-05 at 17:27 By HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam’s console that hands over a managed agent’s credentials, […]