-
Attack hides malware in PNGs and drops custom reverse tunnel on victims’ machines
Microsoft has identified a new attack campaign dubbed “TerminalFix” that tricks victims into running malicious PowerShell commands via a fake Cloudflare CAPTCHA prompt, ultimately installing a custom reverse tunnel that gives attackers persistent, network-level access to compromised machines. It is a more sophisticated variant of the widespread “ClickFix” social engineering technique, directing users to Windows…
-
Anthropic cracks down on hijacked user accounts mining AI tokens
Anthropic has begun clamping down on stolen Claude sessions after identifying a wave of infostealer malware being repurposed to hijack user accounts and exploit their paid AI usage. Rather than paying for their own access, criminals are using commodity malware to steal login credentials, session cookies and multifactor authentication data, then using this to run…
-
How AI could make it harder for governments to use hacking tools
Cryptography professor Matthew Green has sparked debate in the cybersecurity community by suggesting that AI could make software so secure that governments lose their ability to lawfully hack suspects. His argument is that as AI-powered tools become better at finding and patching software vulnerabilities, the “uneasy truce” under which law enforcement uses hacking tools and…
-
FIRST ON FOX: Texas becomes testing ground for new defense against attacks on America’s water systems
The Trump administration is launching “Project Watershed 250” on Monday, a six-month pilot in Texas that pairs federal, state and private-sector cybersecurity resources to protect water utilities from cyberattacks, with plans to expand the model nationwide if successful. The initiative reflects growing concern over the vulnerability of American water infrastructure, particularly at smaller utilities that…
-
Twenty One Pilots debut Robot Voices at All Points East
Twenty One Pilots gave the live debut of “Robot Voices”, a track from their forthcoming eighth album “Breach”, as the highlight of their headline set closing All Points East in London’s Victoria Park on 30 August. Tyler Joseph and Josh Dun performed the song with guest vocalist Emi Grace, who had earlier played the festival’s…
-
The Witcher 4 already runs on all target platforms – CD Projekt Red not taking any chances after Cyberpunk 2077
CD Projekt Red says its upcoming game, The Witcher 4, is already running on all its intended platforms early in development, a deliberate change in approach after the troubled launch of Cyberpunk 2077. Co-CEO Michal Nowakowski told Game Developer that the studio can currently launch the game on PC, PS5 and Xbox Series X at…
-
Bank chief warns frontier AI could destabilise global finance
Andrew Bailey, governor of the Bank of England and chair of the international Financial Stability Board (FSB), has written to G20 finance ministers and central bank governors warning that advanced “frontier” artificial intelligence models pose a growing risk to global financial stability. In a two-page letter sent ahead of a G20 meeting in North Carolina,…
-
A Star Wars Galaxies community server was allegedly hacked with AI assistance by a Reddit moderator harboring a primeval grudge
Star Wars Galaxies Legends, a community-run server for the defunct MMO, says a Reddit moderator allegedly used AI tools to decrypt its client-side game asset files. The server says this exposed custom content such as items and questlines, raising concerns that its work could be copied by rival servers. No player data or personal information…
-
Steam Just Suffered the Biggest Leak in Video Game History
Valve’s Steam platform has suffered what is being described as the largest information leak in video game history: a 12-terabyte trove containing internal builds of every game uploaded to the service between 2003 and 2013. The material was reportedly accessible via an old, publicly available storage system Valve used before switching to more secure infrastructure,…