DuckDuckGo Now Blocks Most YouTube Ads Right Inside Its Browser
2026-07-08T20:51:42Z•ff69e93040b5e308b6b1f5580de4570afd27da3e4568195243063517134bea56
ai agent data leakai security standardsai-generated loadersaptarmored likhobusysnake stealercybercrimeduckduckgoemail securitygitlosthianimelaw enforcement arrestsopenmatterphishingprivacyprompt injectionroundcubesession hijackinguniversitiesunk_masstraction
What happened
Multiple high-impact incidents: Kaspersky attributes a newly named Armored Likho APT campaign to deployments of BusySnake stealer, AI-generated loaders, and phishing focused on government and energy organizations. China-linked UNK_MassTraction is actively exploiting Roundcube webmail flaws to hijack sessions and gain access to US and Canadian university research mail servers. A prompt-injection flaw (“GitLost”) caused a GitHub AI agent to leak private repository data via a crafted public issue and guardrail failures. Other notable items include international arrests tied to major piracy/ad-fue
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- ff69e93040b5e308b6b1f5580de4570afd27da3e4568195243063517134bea56
- Enrichment time
- 2026-07-08T20:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.