September 28, 2026 Malicious browser extensions can hijack AI assistants BragJack research reveals how a single malicious browser extension could hijack Gemini, Perplexity Comet and Edge AI agents with zero clicks.
September 23, 2026 Hackers hijack verified streaming account to spread malware, researchers find HBO Max's verified Reddit account was hijacked to push 108 malicious ads using ClickFix, a technique that tricks victims into running dangerous commands.
September 22, 2026 AI malware can rewrite itself to evade detection Google's Threat Intelligence Group found PROMPTFLUX malware that uses Gemini to rewrite its own code every hour, raising urgent cybersecurity alarms.
September 14, 2026 Scammers know the best time to text you Malwarebytes data reveals scam texts peak around noon ET with 874% higher volume than overnight, and Fridays bring roughly 50% more messages.
September 13, 2026 Thousands of hacked sites trick you into installing malware Over 5,400 legitimate websites now serve fake CAPTCHA scams that trick users into pasting malware commands into Windows Run via ClickFix attacks.
September 4, 2026 Fake patient portal scam can steal your login and infect your PC MyChart phishing emails mimic real patient portal alerts with fake lab results and malware tricks that target Windows users across the country.
August 31, 2026 Fake Chrome update scam could infect your computer A Chrome extension with 70,000 users and a 4.7-star rating began injecting fake update warnings after a threat actor acquired and weaponized it.
August 14, 2026 Cheap TV boxes may secretly click ads for fraud Bitsight researchers say some cheap H96 Android TV boxes may secretly click ads and route strangers' internet traffic through your home Wi-Fi connection.
August 7, 2026 Russian hackers can steal emails without a click Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without victims clicking a link.
August 5, 2026 Fake party invitation scam can hijack your computer Fake party invitations trick victims into downloading malware that gives criminals remote access to computers and spreads through contact lists.