An XSS flaw in the VS Code Live Preview extension exposed developers’ local files and credentials through the localhost server. The post XSS Bug in VS Code Extension Exposed Local Files appeared first on eSecurity Planet. This article has been…
Tag: eSecurity Planet
Booking.com Phishing Campaign Hijacks Hotel Accounts to Defraud Guests
A multi-stage Booking.com phishing campaign is hijacking hotel accounts to defraud guests through convincing payment scams. The post Booking.com Phishing Campaign Hijacks Hotel Accounts to Defraud Guests appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Windows Admin Center Flaw Opens Door to Privilege Escalation
A Windows Admin Center vulnerability could allow authorized attackers to escalate privileges across enterprise environments. The post Windows Admin Center Flaw Opens Door to Privilege Escalation appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Japan’s Washington Hotel Reports Ransomware Attack
Washington Hotel, located in Japan, confirmed a ransomware attack on internal servers and is investigating the extent of the incident. The post Japan’s Washington Hotel Reports Ransomware Attack appeared first on eSecurity Planet. This article has been indexed from eSecurity…
OpenClaw Flaw Enables AI Log Poisoning Risk
OpenClaw versions prior to 2026.2.13 logged unsanitized WebSocket headers, creating a potential AI log poisoning risk. The post OpenClaw Flaw Enables AI Log Poisoning Risk appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
CVE-2026-25903 Impacts Apache NiFi Users
CVE-2026-25903 allows lower-privileged users to modify restricted components in affected Apache NiFi versions. The post CVE-2026-25903 Impacts Apache NiFi Users appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: CVE-2026-25903 Impacts Apache…
Infostealers Target OpenClaw AI Configuration Files
Infostealers are now targeting OpenClaw AI configuration files, exposing tokens, cryptographic keys, and sensitive contextual data. The post Infostealers Target OpenClaw AI Configuration Files appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
Fake Winter Olympics 2026 Stores Target Fans With Data-Theft Scams
Fake Winter Olympics 2026 stores are using lookalike domains and deep discounts to steal fans’ payment and personal data. The post Fake Winter Olympics 2026 Stores Target Fans With Data-Theft Scams appeared first on eSecurity Planet. This article has been…
BeyondTrust RCE Exploited for Domain Control
CVE-2026-1731 is being exploited to gain full Windows domain control in self-hosted BeyondTrust deployments. The post BeyondTrust RCE Exploited for Domain Control appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: BeyondTrust…
Phishing Evolves Into Multi-Platform Fraud Systems
Bolster AI finds phishing has evolved into scalable, multi-platform fraud that hides in search, ads, and SaaS workflows. The post Phishing Evolves Into Multi-Platform Fraud Systems appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Meta Business Admins Exposed by 2FA-Harvesting Chrome Extension
A fake Meta Business Chrome extension stole 2FA secrets to hijack accounts. The post Meta Business Admins Exposed by 2FA-Harvesting Chrome Extension appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Meta…
ClickFix Campaign Uses Fake CAPTCHA Pages to Deliver StealC Malware on Windows
A ClickFix campaign uses fake CAPTCHA pages to trick Windows users into launching StealC malware. The post ClickFix Campaign Uses Fake CAPTCHA Pages to Deliver StealC Malware on Windows appeared first on eSecurity Planet. This article has been indexed from…
260K Users Exposed in AI Extension Scam
Fake AI Chrome extensions exposed 260,000 users by using remote iframes to extract data and maintain persistent access. The post 260K Users Exposed in AI Extension Scam appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Malicious Chrome Extensions Hijack 500,000 VK Accounts in Stealth Campaign
Malicious Chrome extensions hijacked over 500K VK accounts using multi-stage payloads and stealthy persistence techniques. The post Malicious Chrome Extensions Hijack 500,000 VK Accounts in Stealth Campaign appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
1,800+ Windows Servers Hit by BADIIS SEO Malware
Over 1,800 Windows IIS servers were compromised by BADIIS malware in a stealthy global SEO poisoning campaign. The post 1,800+ Windows Servers Hit by BADIIS SEO Malware appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Odido CRM Data Breach Exposes 6.2M Customer Records
A cyberattack on Odido’s CRM system exposed personal data from 6.2 million customers, though passwords and billing information were not affected. The post Odido CRM Data Breach Exposes 6.2M Customer Records appeared first on eSecurity Planet. This article has been…
macOS Infostealers Fuel Growing Cybercrime Market
A growing underground market is driving sophisticated macOS infostealers that steal credentials and cryptocurrency at scale. The post macOS Infostealers Fuel Growing Cybercrime Market appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
Apple Patches Actively Exploited Zero-Day Flaw
Apple patched an exploited zero-day enabling code execution and urges immediate updates. The post Apple Patches Actively Exploited Zero-Day Flaw appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Apple Patches Actively…
Viral AI Caricatures Highlight Shadow AI Dangers
A viral AI caricature trend is spotlighting shadow AI risks, exposing how public LLM use can lead to data leakage and targeted attacks. The post Viral AI Caricatures Highlight Shadow AI Dangers appeared first on eSecurity Planet. This article has…
CVE-2026-25646: Legacy Libpng Flaw Poses RCE Risk
A decades-old libpng flaw exposes widely used systems to denial-of-service and potential code execution via crafted PNG files. The post CVE-2026-25646: Legacy Libpng Flaw Poses RCE Risk appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…