Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
2026-10-22T07:23:22Z•b3de02af144ffad369207d36f842e8ae89710f04093bb2e1c0d4139953fe9dad
CVE-2026-109618CVE-2026-109619ClickFixLazarusNorth KoreaPHPPHP2ShellPlex Media ServerSafePayWordPressactive exploitationcertificate authority compromisecloud infrastructurecritical infrastructuredata breacheMudhramalware deliveryransomwareremote code executionsocial engineeringstolen credentialssupply chain compromise
What happened
BleepingComputer security feed covering active exploitation of Plex Media Server vulnerabilities, critical PHP remote-code-execution flaws, ransomware activity, ClickFix social-engineering campaigns, supply-chain and credential compromises, certificate authority abuse, and threat activity attributed to Lazarus. The most urgent items are the actively exploited Plex flaws, critical PHP2Shell vulnerabilities, and SafePay ransomware impact on critical infrastructure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- b3de02af144ffad369207d36f842e8ae89710f04093bb2e1c0d4139953fe9dad
- Enrichment time
- 2026-10-22T07:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.