CVE-2026-43721

This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to silently hijack clipboard data...

CVE-2026-43721

This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to silently hijack clipboard data...

PT-2026-53717

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 Description A malicious website may be able to silently hijack clipboard data. This issue was addressed through...

CVE-2026-3108

A flaw was found in Mattermost. This vulnerability in the mmctl command-line interface allows attackers to manipulate administrator terminals. By sending specially crafted messages containing ANSI and Operating System Command OSC escape sequences, an attacker can enable screen manipulation, displ...

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks. "This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms," the Microsoft Threat...

Victims risk AsyncRAT infection after being redirected to fake Booking.com sites

Cybercriminals have started a campaign of redirecting links placed on gaming sites and social media—and as sponsored ads—that lead to fake websites posing as Booking.com. According to Malwarebytes research, 40% of people book travel through a general online search, creating a lot of opportunities...

Malicious code in beautiuflsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6411c59a6e312c0f06709b86a5897501c1684f7f958193ac00776fb82b39a116 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toolkiit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d580c098686d198715824a4368bd2e02c21d8d4d659d87888070e4cc8c662c9a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prmpt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fa02975d3c00d07e7e2da0697ef9397316f78ed49bcba987a14c1974ad9de35b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pysoks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7dd599e10754afd7eeae1526114fd6622b766371f863dabc1b5509de18af9894 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in dscord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 920c900a3e3098a8f3ae7ced0ead6c02f2da77f4f571be8dd25a5c28d77e9284 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-toolelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e8f3ca7d5444fb29d61822bfbed14015ff97113f22b42f8091b2954ad9f51f15 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in urllbi3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 370dbe630522936f9f9d4b69e2809676281c2d083bca396b971e9ee00968a165 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in xlsxwiter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 67c14a35900e93a099777791f2eee5a6ee93010d010d48aec7d431ed5c6cd888 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikkit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b492538de98d6ee998d8fd91f4f7308eb144fa6ffb4f0abe103ee389d6d7e42a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websokcets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aa07f6716aa27c5f905c18c975601fdf499bf5bcd4163c8dd28838a22a50f4f4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in bitcionlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4da0fa1d0611659a48bd40ca29cab25429d6128113ede37bc01bf2189f97d4e8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in rcyptocompare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 37093563a21210c8b55167f05fcf2d52a13425c2522a07c7356062c8a1c8ece9 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptocompaer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9555d55891d13e87d790b0eb171419cee3fff49661e7e0e03f8389a1c56eb6bf Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptoccompare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cf5a85e2f6aacf1d23b38474d12353988b869bb476e70c3ccc02b4c724b1f738 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...