Security Now Examines ClickFix Defenses, Blue Hammer Exploitation and Chrome Fixes
· 2:53:23 · Watch on YouTube ↗
Summary
The hosts discuss Opera’s ClickFix clipboard protection, reported ransomware exploitation of the patched Blue Hammer flaw, Chrome 150 security fixes and the tradeoffs of AI safety guardrails.
Key points
- Opera says Paste Protect is enabled by default and warns users when a site attempts to copy potentially harmful commands to the clipboard.
- CISA reported ransomware exploitation of Blue Hammer, a local privilege-escalation flaw in Microsoft Defender. Microsoft patched it on April 14, 2026.
- Vulnerability analyst Will Dorman said Blue Hammer can give local attackers access to account password hashes and potentially system privileges.
- Google said Chrome 150 includes 433 security fixes. The hosts noted that the first 20 listed were rated critical.
- CVE-2026-14382, an input-validation flaw in ANGLE fixed in Chrome 150, earned its anonymous reporter a $250,000 bounty.
- The hosts discussed reports that AI safety safeguards sometimes route security-related coding tasks to a different model, potentially hindering legitimate research.
Article Details
- Topics
- [14:12] AI safety guardrails and security research
- [31:53] Opera Paste Protect and ClickFix attacks
- [48:30] Blue Hammer exploitation and patching
- [01:09:06] Chrome 150 security fixes and vulnerability discovery
- [01:20:15] Post-quantum signatures and passkey exchange in Chrome