AKA Comp Solutions

Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments -

Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents browsing the web.

StegoAd: How 119 Fake Browser Extensions Stole Credentials and Ran Ad Fraud for Two Years -

StegoAd: How 119 Fake Browser Extensions Stole Credentials and Ran Ad Fraud for Two Years Microsoft shut down the StegoAd campaign, which used 119 malicious Edge extensions, hit 2.6M installs, and ran undetected for two years.

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve -

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve UNC5792 and UNC4221 have been targeting US government officials, military leaders, and allied personnel.

The Gentlemen RaaS: rapid growth and a new ransomware variant -

The Gentlemen RaaS: rapid growth and a new ransomware variant Kaspersky researchers analyze incidents related to The Gentlemen RaaS group, disclose their tools and TTPs, and find a new ransomware variant.

Claude Code runs a GitHub repo's hidden malware without verification, giving attackers full control -

Claude Code runs a GitHub repo's hidden malware without verification, giving attackers full control Security researchers at Mozilla's 0DIN platform have shown how a single compromised GitHub repo can take over a developer's machine the moment an AI coding tool like Claude Code runs its setup. The catch: the malicious code only loads at runtime via a DNS query, invisible in the repo, to scanners, a...

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers -

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers Infoblox found 236,493 DCloud Uni-App domains powering crypto scams, WhatsApp phishing, fake gambling sites, and wallet drainers.

Polymarket customers lose $3 million in supply-chain attack -

Polymarket customers lose $3 million in supply-chain attack Polymarket says it will fully reimburse customers who lost an estimated $3 million after hackers injected a malicious script into the platform's frontend following a breach at a third-party vendor.

Texas Parks & Wildlife Data Breach Affects 3 Million Individuals -

Texas Parks & Wildlife Data Breach Affects 3 Million Individuals Hackers stole personal information after breaching the systems of a third-party license vendor serving TPWD.

New Exploit Bypasses Apple's Boot Defenses, Affects Millions of iPhones -

New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers.

FortiBleed: The Most Detailed Breakdown Yet of an Active Russian Credential-Harvesting Operation -

FortiBleed: The Most Detailed Breakdown Yet of an Active Russian Credential-Harvesting Operation FortiBleed targeted 430,000+ FortiGate devices, harvesting 110M credentials and enabling breaches through large-scale credential theft.