Hackers Enhance ClickFix Attack Using Cache Smuggling to Stealthily Download Malicious Files

Cybersecurity researchers have discovered a sophisticated evolution of the ClickFix attack technique that leverages browser cache smuggling to covertly place malicious files on target systems without traditional file downloads. This advanced social engineering campaign specifically targets enterprise users through fake…

When Your SaaS Feels Human at Scale

Discover how AI-driven communication brings empathy and personality to SaaS, helping automation feel more human, personal, and emotionally intelligent. The post When Your SaaS Feels Human at Scale appeared first on Security Boulevard. This article has been indexed from Security…

GitLab Releases Security Update to Patch Multiple DoS-Enabling Vulnerabilities

GitLab has issued a critical security update to address several denial-of-service (DoS) vulnerabilities affecting both Community Edition (CE) and Enterprise Edition (EE). Self-managed installations should upgrade immediately to versions 18.4.2, 18.3.4, or 18.2.8. GitLab.com already runs the patched versions, and…

Polymorphic Python Malware That Mutates Every Time It Runs

A newly spotted Python remote access trojan (RAT) on VirusTotal employs advanced polymorphic and self-modifying techniques, allowing it to alter its code signature on every execution and evade detection. Security researchers examining VirusTotal submissions identified a suspicious Python RAT (SHA256:7173e20e7ec217f6a1591f1fc9be6d0a4496d78615cc5ccdf7b9a3a37e3ecc3c)…

APT Hackers Abuse ChatGPT to Develop Advanced Malware and Phishing Campaigns

Security researchers at Volexity have uncovered compelling evidence that China-aligned threat actors are leveraging artificial intelligence platforms like ChatGPT to enhance their sophisticated cyberattack capabilities. The group, tracked as UTA0388, has been conducting sophisticated spear phishing campaigns since June 2025,…