ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Apple’s Hide My Email feature has an unfixed bug that leaves email addresses exposed

A year-old vulnerability in Apple's Hide My Email can expose users' real email addresses. Apple claimed to fix it in March 2026. Independent testing shows it wasn't fixed.

Florida Python Challenge returns after last year’s record removal

FWC announces winners of the 2025 Florida Python Challenge TAMPA, Fla. (WFLA )— In just about a week, registered participants ...

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private data.
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.