Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

A BleepingComputer security-news feed covering active exploitation, critical vulnerabilities, ransomware, supply-chain compromises, credential theft, certificate authority abuse, ClickFix social engineering, and threat-actor operations. Notable items include CISA warnings about Plex exploitation and SafePay ransomware, emergency PHP patches for critical PHP2Shell RCE vulnerabilities, compromised UpdraftCentral keys used to backdoor WordPress sites, and attacks involving Lazarus and cloud infrastructure providers.