TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor https://firewalls.firm.in/wp-content/uploads/2026/08/cf-clickfix.jpg Ravie LakshmananAug 30, 2026Social Engineering / Malware Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious command in Windows Terminal or PowerShell. “While traditional ClickFix campaigns direct victims to the Windows Run dialog, TerminalFix campaigns apply the same technique ...
Read More »Vulnerabilities & Exploits
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE https://firewalls.firm.in/wp-content/uploads/2026/08/wordpress-themes.jpg Ravie LakshmananAug 29, 2026Vulnerability / Web Security Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and Patchstack, ...
Read More »19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code https://firewalls.firm.in/wp-content/uploads/2026/08/1000103889.jpg Ravie LakshmananAug 28, 2026Web Security / Supply Chain Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six months and harbored wallet secret stealing and cryptocurrency draining capabilities. The extensions, per Socket security researcher Karlo Zanki, ...
Read More »Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE https://firewalls.firm.in/wp-content/uploads/2026/08/nodejs.gif Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem. The Windows path ...
Read More »NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions https://firewalls.firm.in/wp-content/uploads/2026/08/docusign.jpg Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead of publication, Island characterized the $320/month service as ...
Read More »Anthropic’s Claude chatbot conversations, including crypto keys, exposed on Google Search
Anthropic’s Claude chatbot conversations, including crypto keys, exposed on Google Search https://etimg.etb2bimg.com/thumb/msid-132677421,imgsize-353532,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/anthropics-claude-chatbot-conversations-including-crypto-keys-exposed-on-google-search.jpg A trove of seemingly private conversations with Anthropic’s Claude chatbot appeared in Google Search results recently, sparking alarm after users discovered sensitive information including cryptocurrency wallet keys and personal details which have been exposed inadvertently. According to a report by Fortune, the issue was traced to Claude’s ‘share’ ...
Read More »⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More https://firewalls.firm.in/wp-content/uploads/2026/08/recap-n.jpg Ravie LakshmananAug 24, 2026Cybersecurity / Hacking A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, ...
Read More »US House Democrats press Anthropic, OpenAI about rogue AI agents
US House Democrats press Anthropic, OpenAI about rogue AI agents https://etimg.etb2bimg.com/thumb/msid-133140626,imgsize-40282,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/us-house-democrats-press-anthropic-openai-about-rogue-ai-agents.jpg A coalition of U.S. House Democrats is calling on Anthropic CEO Dario Amodei and OpenAI CEO Sam Altman to explain how their AI systems escaped containment during a security test, adding that Congress should hold hearings about the incidents, according to letters the lawmakers sent to the companies on ...
Read More »TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit https://firewalls.firm.in/wp-content/uploads/2026/08/tiktok.jpg Ravie LakshmananAug 22, 2026Privacy / Regulation The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of violating child privacy laws in the country. As part of the settlement, the social media platform will ...
Read More »Ex-Google engineer’s conviction for stealing AI secrets partially overturned
Ex-Google engineer’s conviction for stealing AI secrets partially overturned https://etimg.etb2bimg.com/thumb/msid-133390905,imgsize-1553937,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/ex-google-engineers-conviction-for-stealing-ai-secrets-partially-overturned.jpg A federal judge on Thursday tossed part of the conviction of former Google software engineer Linwei Ding, who was found guilty earlier this year of stealing AI trade secrets from the U.S. tech giant to benefit two Chinese companies. U.S. District Court Judge Vince Chhabria in San Francisco ruled there ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











