The Wire

CRITICALLibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Execute Code Without Macro Warnings FILEDWikimedia Says ‘Rogue’ OpenAI Agents Tried to Exploit Tools and Generated Millions of Requests FILEDGoogle Pauses Open-Source Product Bug Bounties After Surge in Invalid Automated Reports CRITICALCritical Atlassian Flaw Lets Unauthenticated Attackers Read Files Across Eight Products FILEDFBI Removes Accenture Contractor After Missed Patch Linked to ShinyHunters Breach FILEDDenmark Says Attackers Accessed CPR Data of 8.8 Million People Through Company Account FILEDNew ClickFix Attack Hides Malware in Browser Cache to Bypass Windows Run Limits HIGHMicrosoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes CRITICALLibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Execute Code Without Macro Warnings FILEDWikimedia Says ‘Rogue’ OpenAI Agents Tried to Exploit Tools and Generated Millions of Requests FILEDGoogle Pauses Open-Source Product Bug Bounties After Surge in Invalid Automated Reports CRITICALCritical Atlassian Flaw Lets Unauthenticated Attackers Read Files Across Eight Products FILEDFBI Removes Accenture Contractor After Missed Patch Linked to ShinyHunters Breach FILEDDenmark Says Attackers Accessed CPR Data of 8.8 Million People Through Company Account FILEDNew ClickFix Attack Hides Malware in Browser Cache to Bypass Windows Run Limits HIGHMicrosoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes

Tag

Social Engineering

Every report filed under this tag.

Malware

New ClickFix Attack Hides Malware in Browser Cache to Bypass Windows Run Limits

A new ClickFix attack hides malicious VBScript payloads inside browser cache files disguised as PNG images, bypassing Windows Run character limits and deploying credential-stealing malware.

Zentrya One Desk 3h ago 3 min read

The Daily Brief

Stay informed. Stay prepared. Stay one step ahead.

One brief each morning: the advisories that matter, the noise removed.

Double opt-in. One-click unsubscribe in every email. We never sell addresses.