9 stories, newest first · one card per story
Fraudulent ChatGPT Plus billing emails direct victims to interactive phishing pages on nxcli.io that collect card details and allow operators to capture OTPs in real time.
Fake ChatGPT Plus billing emails use live operators and fake checkouts to capture card details and OTPs; Fortra researchers observed the infrastructure.
CloudSEK says one affiliate’s data held 5,407 texts from 153 devices, with call forwarding on 58 percent.
The paper defines inalienable human-in-the-loop and prototypes Countersign on consumer phones so approval survives a compromised harness.
Enhanced Protection in Google Messages will use Gemini on unknown-sender chats and Gemini Nano to score unfamiliar links.
Reflectiz says its AI pentest agent found a critical OTP bypass on a major insurer's website.
Canadian Cyber Centre warns Erlang/OTP is affected by CVE-2026-65634 and CVE-2026-89422 and urges updates.
DEF CON 34 research shows AI customer-service agents can be manipulated via prompt injection and email tricks to leak OTPs and act as victims.
Canada's Cyber Centre warns that multiple Erlang/OTP versions are affected by vulnerabilities and urges administrators to apply updates.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views