Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address Bar

The malware authors associated with a Phishing-as-a-Service (PhaaS) kit known as Sneaky 2FA have incorporated Browser-in-the-Browser (BitB) functionality into their arsenal, underscoring the continued evolution of such offerings and further making it easier for less-skilled threat actors to mount attacks at scale. Push Security, in a report shared with The Hacker News, said it observed…

Read More

CrashFix Chrome Extension Delivers ModeloRAT Using ClickFix-Style Browser Crash Lures

Cybersecurity researchers have disclosed details of an ongoing campaign dubbed KongTuke that used a malicious Google Chrome extension masquerading as an ad blocker to deliberately crash the web browser and trick victims into running arbitrary commands using ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) dubbed ModeloRAT. This new escalation of ClickFix,…

Read More

How Shopify is bringing agentic AI to enterprise commerce

Shopify is enhancing core enterprise commerce workflows with agentic AI, automating operations while expanding sales channels. The adoption of generative AI in commerce has largely centred on customer support chatbots and basic content generation. Shopify’s Winter ‘26 Edition, titled Renaissance, pushes this technology toward agentic commerce where AI systems actively manage workflows, configure infrastructure, and…

Read More

Hideo Kojima Thinks AI Is His ‘Friend’

Celebrated gaming auteur Hideo Kojima is making waves once again with statements about artificial intelligence. This time, sporting a bit of a new look in a recent interview, Kojima has said he sees AI as a boon that can help cut out what he describes as “tedious” tasks, helping developers to lower costs and produce…

Read More

Enterprise AI adoption shifts to agentic systems

According to Databricks, enterprise AI adoption is shifting to agentic systems as organisations embrace intelligent workflows. Generative AI’s first wave promised business transformation but often delivered little more than isolated chatbots and stalled pilot programmes. Technology leaders found themselves managing high expectations with limited operational utility. However, new telemetry from Databricks suggests the market has…

Read More

Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme

Oct 09, 2025Ravie LakshmananVulnerability / Website Security Threat actors are actively exploiting a critical security flaw impacting the Service Finder WordPress theme that makes it possible to gain unauthorized access to any account, including administrators, and take control of susceptible sites. The authentication bypass vulnerability, tracked as CVE-2025-5947 (CVSS score: 9.8), affects the Service Finder…

Read More