North Bay Computer

A new AI named Claude Mythos has begun autonomously finding zero-day security flaws across major systems. The speed of digital threats is officially moving faster than human patch cycles. Is your business security ready for the era of autonomous attacks?



https://www.helpnetsecurity.com/2026/04/15/anthropic-claude-mythos-ai-vulnerability-discovery

If a website ever tells you to press Windows + R, congratulations: you have found a scam.

That little keystroke trick is the calling card of ClickFix, a fast-growing malware scheme that basically says, “Why hack around security tools when we can just get the user to install the problem for us?”

Here is how it works:
You land on a hacked site, a fake CAPTCHA pops up, and it asks you to press Windows + R, then paste and run a command to “prove you’re human.”

You do it.
The malware says thank you.
Your passwords, cookies, session tokens, and maybe even stored credit cards start packing their bags.

The sneaky part?
Most security tools do not see a download, because you ran the command yourself. To Windows, it looks less like an attack and more like someone having a very suspiciously bad idea.

A few smart moves:
▶️ Teach your team: if any website asks them to use Windows + R, close the tab immediately.
▶️ Restrict PowerShell for non-IT staff. Most employees do not need it, and malware knows that.
▶️ Use endpoint protection with behavioral monitoring, not just signature scanning.

Fake CAPTCHAs are designed to look convincing. No shame there. But once your team knows the Windows + R = nope rule, this scam loses a lot of its magic.

A new phishing campaign is mimicking Google Workspace pages to steal login codes and certificates. Even tech-savvy users can be fooled by these perfect clones. Have you trained your team on how to spot the latest fake login pages?



https://www.helpnetsecurity.com/2026/04/08/social-engineering-open-source-developers

A new CNET survey found plenty of people could recycle or trade in old smartphones for cash… yet 29% of Americans are still running a tiny electronics museum at home, while others are apparently using the trash can as a tech retirement plan.

The good news? We recycle old tech for our clients for free, so your outdated devices can finally leave the house with a little more dignity.

https://www.bleepingcomputer.com/news/security/fake-google-security-site-usespwa-app-to-steal-credentials-mfa-codes

Don’t let a fake “Google Security” page sweet-talk your team into installing trouble with a blue button.

Hackers are using malicious web apps to bypass MFA and steal passwords, which is basically phishing wearing a fake mustache and carrying a clipboard.

Make sure your team knows what this scam looks like before someone accidentally installs a problem.


https://www.bleepingcomputer.com/news/security/fake-google-security-site-uses-pwa-app-to-steal-credentials-mfa-codes/