Know what changed.
Trace why it matters.

Researchers at Manifold Security found third-party[.]com, an ordinary domain often used in documentation for an external website, API, or service, serving a fake Cloudflare-style verification page to Windows visitors. The page urged visitors to open the Windows Run box and paste a clipboard-copied command designed to download and execute a PowerShell script; the script-hosting domain was not resolving at the time of writing.

ClickFix is described as social engineering that convinces victims to run commands themselves, often using legitimate operating-system tools and the permissions of the persuaded user; consequences can range from information theft to more serious company-network compromise.

Cameron John Wagenius, a U.S. Army soldier stationed in South Korea, pleaded guilty to hacking telecommunications companies and stealing mobile call and text metadata from more than 100 million AT&T customers; he was sentenced to 70 months in federal prison and ordered to pay $294,978 in restitution. The intrusions involved Snowflake customers with exposed credentials and no enforced multi-factor authentication; Snowflake has since mandated MFA on all accounts.

Federal investigators characterized the case as a serious insider-threat investigation because Wagenius was an active-duty soldier with secret clearance allegedly creating hacking tools and trafficking in data.

LinkedIn is adding verification features intended to make fabricated professional identities, work histories, and company impersonation harder, in response to generative AI lowering the cost of creating convincing profiles and outreach. The features include colleague or classmate confirmations of work or study affiliations; these confirm an affiliation but do not assess ability or recommend the person.

The checks may help establish whether a recruiter is affiliated with a recognized company, but may be less useful when scammers invent the employer itself or operate a fraudulent company Page.