DJBSEC's CyberNews 2026-03-27

Claude Chrome Extension Zero-Click Vulnerability Discovered

Researchers have identified a critical zero-click vulnerability in a Claude-related Chrome extension that could allow attackers to access sensitive data without user interaction. The flaw exploits how the extension processes content, enabling unauthorized data access from AI interactions. Because no user action is required, the attack is particularly dangerous and difficult to detect. This issue highlights the growing risks associated with browser-based AI integrations. Users are advised to update extensions immediately and limit permissions where possible.
Read More

“Quishing” QR Code Phishing Campaign Targets Users

A new phishing technique known as “quishing” is using malicious QR codes to trick users into visiting fraudulent websites. Attackers embed QR codes in emails, documents, or physical locations, bypassing traditional email security filters. Once scanned, users are redirected to credential-harvesting pages or malware downloads. This method is gaining traction due to its ability to evade detection tools. Security experts recommend verifying QR code sources and avoiding scanning unknown codes.
Read More

Claude Extension Flaw Enables Zero-Click Data Theft

Further analysis has revealed that the Claude browser extension flaw could enable attackers to steal sensitive data through zero-click exploitation. The vulnerability allows malicious content to trigger unauthorized actions within the extension environment. This could expose user prompts, responses, and other confidential information handled by AI tools. The issue underscores the importance of securing AI-powered browser extensions. Developers are encouraged to implement stricter input validation and sandboxing mechanisms.
Read More

Synology DiskStation Manager Vulnerability Exposes NAS Devices

A vulnerability in Synology DiskStation Manager (DSM) could allow attackers to compromise network-attached storage devices. Exploitation may enable unauthorized access to stored data or system control. NAS devices are often used for backups and sensitive file storage, making them attractive targets. Synology has released patches and recommends immediate updates. Users should also restrict external access to NAS systems to reduce exposure.
Read More

Critical Cisco Secure Firewall Vulnerability Identified

A critical vulnerability has been discovered in Cisco Secure Firewall products that could allow attackers to execute malicious code or disrupt operations. The flaw affects widely deployed security appliances, increasing the potential impact. Exploitation could lead to unauthorized access or denial-of-service conditions. Cisco has issued patches and guidance for affected customers. Organizations should prioritize updating firewall systems to mitigate risk.
Read More

Microsoft Entra ID MFA Limitations Raise Security Concerns

Security researchers are highlighting limitations in Microsoft Entra ID’s multi-factor authentication (MFA) that could be exploited by attackers. Certain configurations may allow attackers to bypass or weaken MFA protections under specific conditions. These findings emphasize that MFA alone is not a complete defense without proper configuration and monitoring. Organizations should review authentication policies and implement additional safeguards such as conditional access. Continuous monitoring of login activity is also recommended.
Read More

OpenAI Launches Safety Bug Bounty Program

OpenAI has introduced a safety-focused bug bounty program to identify vulnerabilities in its AI systems. The initiative aims to encourage researchers to report issues related to misuse, data exposure, and model behavior. By incentivizing responsible disclosure, OpenAI hopes to improve the security and reliability of its platforms. This move reflects a broader industry trend toward securing AI technologies. Organizations using AI should also consider adopting similar security practices.
Read More

Fake VS Code Security Alerts Used to Target Developers on GitHub

Attackers are using fake Visual Studio Code security alerts on GitHub to trick developers into downloading malicious code. The alerts appear legitimate and urge users to take immediate action, increasing the likelihood of compromise. Once executed, the malicious payload can steal credentials or compromise development environments. This campaign highlights ongoing risks in developer ecosystems and software supply chains. Developers are advised to verify alerts and avoid downloading untrusted files.
Read More

TikTok for Business Accounts Targeted in New Phishing Campaign

A phishing campaign is targeting TikTok for Business accounts, aiming to steal login credentials and access advertising platforms. Attackers send convincing emails that mimic official TikTok communications to lure victims. Once credentials are compromised, attackers can hijack accounts and potentially run fraudulent campaigns. The attack highlights the growing focus on social media platforms as lucrative targets. Users should enable strong authentication and verify all communications before taking action.
Read More