Fake GoogleTranslate Chrome Extension Lets Attackers Remotely Control Your Browsers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A malicious Chrome extension masquerading as GoogleTranslate that can steal sensitive browser data, live-stream web sessions, and allow threat actors to remotely interact with Chrome windows while keeping their activity out of the victim’s view. The operation …

Google Play Apps Use Stealth Loaders to Deliver Anatsa Banking Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Android users are facing a fresh reminder that a familiar app-store listing can hide a financial threat. Researchers have observed malicious loaders on Google Play that can prepare the ground for Anatsa, an Android banking Trojan designed …

Ransomware Operators Disable EDR, Backup Software and Windows Telemetry Before Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Ransomware crews are increasingly trying to blind a victim before they encrypt anything. Analysis shows that attackers can disable endpoint detection and response tools, interrupt Windows telemetry, and target backup services to reduce the chance that defenders …

Apple Private Cloud Compute Flaw Enables Root File Writes and AI Inference Telemetry Leakage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 CVE-2026-20685 is a path traversal vulnerability affecting Apple’s Private Cloud Compute (PCC), potentially allowing attackers to write files as root during node boot and redirect sensitive AI inference telemetry to an external server. Sentry Security researcher Drinor …

Ransomware Attackers Target Managers to Steal Data and Move Deeper Into Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Ransomware campaigns are increasingly starting with people who hold the keys to everyday business decisions. Attackers are compromising managers whose accounts can open doors to contracts, payments, customer records, and internal teams. Their job titles can make …

Kimsuky Uses Local LLMs, AI-Generated Lures and GitHub C2 to Deploy AsyncRAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Kimsuky has been observed blending polished AI-made documents with familiar phishing tactics to push AsyncRAT, a remote-access trojan. The campaign shows how old delivery methods can gain new credibility when the bait looks professionally written and carefully …

Connective eID Extension Flaws Let Attackers Steal Belgian ID PINs and Trigger Drive-By RCE

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Critical flaws have been found in the Connective Signing Extension, a browser component used by more than 2 million people in Belgium to access electronic identity cards and Maestro payment cards. The now-patched issues could have allowed …

Hackers Distributing Malicious VBS/PowerShell RAT Chain Via Multiple DuckDNS Hosts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A newly observed malware campaign is using simple Windows scripts to open the door to remote control and data theft. The chain relies on Visual Basic Script, or VBS, and PowerShell, two tools present on business computers, …

Atlassian Rovo Prompt Injection Exfiltrates Jira and Confluence Data Without User Approval

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 RovoBlast is a one-click prompt-injection vulnerability in Atlassian Rovo that could allow attackers to exfiltrate sensitive enterprise data from Jira, Confluence, SharePoint, and other connected services. Atlassian addressed the reported URL-based issue on the server side after …

Claude Code Sessions Spawn Reverse Tunnels and LaunchAgent Persistence on macOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Claude Code activity on a macOS developer machine has raised a difficult security question: when does convenient automation become a serious exposure? A new Elastic investigation found a session that opened reverse tunnels, sent login details to …