
ClickFix Attacks Now Bypass Windows Run Limits via Browser Cache
A new variant of the ClickFix attack technique uses cached browser data to execute payloads, circumventing standard Windows security restrictions on remote code execution.
Everything Threat Times has reported about The Hacker News: 6 stories, newest first. Part of our Cyber Attacks coverage.

A new variant of the ClickFix attack technique uses cached browser data to execute payloads, circumventing standard Windows security restrictions on remote code execution.

Malware in South Korea and Taiwan mimics email security tools and legitimate OS processes to hide from defenders on network appliances.

Security teams evaluating autonomous penetration testing tools must verify what these agents can discover and exploit versus where they fall short of human expertise.

Researchers identified 16 fake browser add-ons that intercept cryptocurrency wallet secrets during import processes.

Analysis reveals Wazza phishkit employs advanced session management to target banking, government, and manufacturing entities across three continents.

A ransomware affiliate kept illicit gains while another attacker left a server exposed with intrusion tools, highlighting security failures on both sides.