To that end, it banned a coordinated network of ChatGPT accounts likely originating from Southeast Asia and operating from the city of Poipet, a region with extensive
COLDCARD security audit phishing attack installs remote access tool
CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
One such service, Poison Claude, claims to offer access to Anthropic’s large language models (LLMs), including Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6.
“Advertisements for Poison Claude
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
A third flaw could expose sensitive data and control-plane details through application programming interface (API) routes
Google Blogger locks hundreds of blogs in malware false positive
Black Hat USA 2026 – Summary of Vendor Announcements (Part 3)
Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.
The post Black Hat USA 2026 – Summary of Vendor Announcements (Part 3) appeared first on SecurityWeek.
Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
The three most serious:
An unauthenticated flaw in Veeam’s console that hands over a managed agent’s credentials, rated 9.5
A cross-tenant flaw in HashiCorp’s MCP server that lets one user’s Terraform token be reused for later users’
How AI-powered phishing killed blocklists for good
Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
The new dead drop resolver approach, observed in two trojanized npm package “bianira-ui” and “fluid-type-ui,” has been codenamed NullReceiver by
