CVE in Claude Chrome Extension Allows Plugin Hijacking
A flaw in the Claude Chrome extension allows any other plugin to hijack victims' AI, potentially extracting files and sending emails on behalf of users.
Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
A flaw in the Claude Chrome extension allows any other plugin to hijack victims' AI, potentially extracting files and sending emails on behalf of users.
Hiring more analysts won't solve the SOC's alert problem due to the volume of alerts exceeding human investigation capacity.
Senate Minority Leader Chuck Schumer is seeking a plan from the Department of Homeland Security to coordinate with state and local governments on defending against AI-strengthened hacks.
General Motors has agreed to pay $12.75 million to settle charges it violated millions of consumers' privacy by collecting and selling driving data without consent.
A cyberattack on education software provider Instructure forced multiple universities to reschedule final exams, with hackers from the ShinyHunters group demanding a ransom by May 12.
A former government contractor was found guilty of conspiring to destroy dozens of federal databases after being fired from his job.
Ivanti warned customers to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile exploited in zero-day attacks, with over 850 IP addresses exposed online.
ShinyHunters extortion gang breached education technology giant Instructure, defacing Canvas login portals for hundreds of colleges and universities, threatening to leak stolen data if a ransom is not paid by May 12, 2026.
Iranian government hackers are using Chaos ransomware as a cover for alleged espionage and data theft operations, according to researchers from Rapid7.