NewsThe Hacker News21.09.2026SME Public sector

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people already trust: code that takes a bad turn, old payloads coming back, exposed systems, weak checks, fake fixes, and attack paths that look almost too easy. Even the research side is getting messy, with more findings, more automation, and not

Other advisories

Highosv:MAL-2026-17692Malicious code in clickfix_npm_delivery (npm)
Not ratedncscnz:compromised-websites-serving-clickfix-pagesCompromised Websites Serving ClickFix Pages
Not ratedsingcert:al-2025-068Ongoing ClickFix Campaign

Other news entries

Yet Another ClickFix Campaign, (Wed, Oct 28th)NewsSANS ISC Diary28.10.2026
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacksNewsBleepingComputer21.10.2026
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP ConnectionsNewsSecurityWeek21.10.2026
ClickFix has never been bigger, and AI tools are its most convincing lure yetNewsBleepingComputer21.10.2026
Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious CommandsNewsThe Hacker News21.10.2026
Decades-Old Windows Utility Powers Modern ClickFix AttackNewsDark Reading21.10.2026
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanNewsThe Hacker News20.10.2026
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other MalwareNewsThe Hacker News20.10.2026

Source: https://thehackernews.com/2026/09/weekly-recap-cisco-0-day-ai-agent-rce.html

More on ClickFix

Other advisories

Other news entries