Japanese software company Helpfeel is notifying users of its image-sharing service Gyazo that their information has been accessed by hackers. Gyazo is a widely used cross-platform tool that allows users to capture screenshots, GIFs, or short screen recordings and instantly generate shareable links. Helpfeel announced this week that it had recently detected unauthorized access to … Read more
Security researcher Gal Weizman of Forever Security has revealed a new attack technique that can hijack the AI assistants built into popular browsers using a single malicious browser extension. The proof-of-concept, called BragJack, was demonstrated using five Chromium-based browsers or browser assistants: Google Chrome’s Gemini Live, Perplexity Comet, Microsoft Edge, Opera Neon, and Anthropic’s Claude … Read more
Cybersecurity firm TigerByte Cyber has emerged from stealth mode and raised $3 million in a seed funding round led by Hale Capital Partners, with additional backing from Tenon VC. Based in Hanover, NH TigerByte Cyber Provides cyber hardening for AI and edge devices to protect systems where they operate. The company has developed a solution … Read more
Collaboration suites like M365 offer unparalleled convenience. Millions of teams rely on them to quickly share documents with colleagues, customers and business partners. But when sharing is so easy, data security becomes much more difficult. Cloud sharing is so integral to the modern workplace that it’s hard to imagine how offices could ever function without … Read more
Researchers at security firm Hacktron used Claude to create a working exploit for a vulnerability in an image processing library, then linked it to a vulnerability in OpenAI’s login system to take over employees’ ChatGPT and Codex accounts, and finally gained access to internal code repositories. The entry point was OpenAI’s community forum, community.openai.com, which … Read more
An ongoing malware campaign is using SEO-optimized GitHub repositories to impersonate well-known software companies in order to promote a previously undocumented information theft operation called Rapuncel. LastPass and Delphos Labs have uncovered the campaign in which they reportedly impersonate the password manager brand and at least 39 other companies. In addition to the Rapuncel infostealer, … Read more
Weekly from SecurityWeek Cybersecurity News Summary provides a succinct overview of key developments that may not be covered entirely in isolation but are nonetheless relevant to the broader threat landscape. This curated summary highlights key stories about vulnerability disclosures, new attack vectors, policy updates, industry reports and other notable events to help readers stay well-informed … Read more
Image sharing platform Gyazo has confirmed that a data breach has occurred after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. Gyazo is a cloud-based screenshot and screen recording tool from Helpfeel that automatically uploads users’ screenshots to the cloud and provides them with a shareable link for sharing … Read more