Blog – Page 519 – Cyber Mike

Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool

Cybersecurity researchers have disclosed details of a malicious Google Chrome extension that’s capable of stealing API keys associated with MEXC, a centralized cryptocurrency exchange (CEX) available in over 170 countries, while masquerading as a tool to automate trading on the platform.
The extension, named MEXC API Automator (ID: pppdfgkfdemgfknfnhpkibbkabhghhfh), has 29 downloads and is still

GoBruteforcer Botnet Targeting Crypto, Blockchain Projects

The botnet’s propagation is fueled by the AI-generated server deployments that use weak credentials, and legacy web stacks.

The post GoBruteforcer Botnet Targeting Crypto, Blockchain Projects appeared first on SecurityWeek.

After Goldman, JPMorgan Discloses Law Firm Data Breach

The law firm Fried Frank seems to be informing high-profile clients about a recent data security incident.

The post After Goldman, JPMorgan Discloses Law Firm Data Breach appeared first on SecurityWeek.

Cyber Insights 2026: External Attack Surface Management

AI will assist companies in finding their external attack surface, but it will also assist bad actors in locating and attacking the weak points.

The post Cyber Insights 2026: External Attack Surface Management appeared first on SecurityWeek.

Betterment confirms data breach after wave of crypto scam emails

U.S. digital investment advisor Betterment confirmed that hackers breached its systems and sent fake crypto-related messages to some customers. […]

Convincing LinkedIn comment-reply tactic used in new phishing

Scammers are flooding LinkedIn posts with fake “reply” comments that appear to come from the platform, warning of bogus policy violations and urging users to click external links. Some even abuse LinkedIn’s official lnkd.in shortener, making the phishing attempts harder to spot. […]

Broadcom Wi-Fi Chipset Flaw Allows Hackers to Disrupt Networks

The vulnerability was discovered in Asus routers, but all devices using the affected chipset are susceptible to attacks.

The post Broadcom Wi-Fi Chipset Flaw Allows Hackers to Disrupt Networks appeared first on SecurityWeek.

[Webinar] Securing Agentic AI: From MCPs and Tool Access to Shadow API Key Sprawl

AI agents are no longer just writing code. They are executing it.
Tools like Copilot, Claude Code, and Codex can now build, test, and deploy software end-to-end in minutes. That speed is reshaping engineering—but it’s also creating a security gap most teams don’t see until something breaks.
Behind every agentic workflow sits a layer few organizations are actively securing: Machine Control

Target employees confirm leaked code after ‘accelerated’ Git lockdown

Multiple current and former Target employees confirmed that leaked source code samples posted by a threat actor match real internal systems. The company also rolled out an “accelerated” lockdown of its Git server, requiring VPN access, a day after being contacted by BleepingComputer. […]

SAP’s January 2026 Security Updates Patch Critical Vulnerabilities

SAP has released 17 security notes, including four that address critical SQL injection, RCE, and code injection vulnerabilities.

The post SAP’s January 2026 Security Updates Patch Critical Vulnerabilities appeared first on SecurityWeek.

Cyber News