#ai-security

Attackers are hijacking Instagram accounts by manipulating Meta AI support tools into accepting fake identity verification. The method bypasses 2FA and geolocation checks, enabling full account takeovers including high-profile users. Victims are left locked out as automated recovery systems fail to escalate cases.

Source: BleepingComputer

Dutch authorities dismantled a 17-million-device botnet and seized Russian-linked infrastructure, while ShinyHunters breaches impacted Canvas LMS and Carnival Corporation, Lazarus deployed the RemotePE RAT against financial targets, Glassworm targeted developers through poisoned software repositories, and SymJack exposed remote code execution risks across leading AI coding agents.

The SymJack attack abuses symlinked repositories to trick AI coding agents into executing malicious configuration changes, leading to remote code execution and credential exposure. Multiple AI development tools and CI/CD environments are impacted through trusted workflow abuse.

Source: Adversa AI

Cybercriminals deployed AI-generated exploit code targeting a zero-day two-factor authentication bypass flaw in open-source web administration software for planned mass exploitation.

Source: Google Threat Intelligence Group

A vulnerability in Anthropic’s Claude Chrome extension allows other browser extensions to inject prompts and fully control AI actions without proper identity checks. Attackers can exploit the flaw to access private data, manipulate cloud files, and trigger unauthorised actions through trusted extension messaging channels.

Source: LayerX

A CVSS 10 prompt injection flaw in Gemini CLI GitHub workflows lets attackers steal secrets and hijack repositories through manipulated issue triage.

Source: Pillar Security | Google

A critical Microsoft Copilot vulnerability allowed attackers to inject prompts and exploit rendering behaviour to silently extract emails, documents, and chat data through external requests. Some attacks required no user interaction, while others persisted across sessions using Copilot memory features.

Source: Embrace The Red