Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

Software Supply Chain Attacks
Post-Quantum Migration
Vulnerability Disclosure
Vertical SaaS
Restaurant Technology
Mars Rover Operations
Syndicated Science Writing
Agentic Commerce
Consortium-Governed Stablecoins
WordPress Plugin Security

How this is made

Today For You My Stack Off Radar Search

Topic

ClickFix paste social engineering

Fake CAPTCHA and verification overlays that get a user to copy attacker-supplied commands and run them themselves, here moved from the Run dialog into Windows Terminal.

Current clusters

security1 distinct publisher

Attackers move the ClickFix paste into Windows Terminal to land a multi-stage intrusion chain

Microsoft's TerminalFix writeup shows the same fake CAPTCHA lure now feeding multi-line PowerShell into Windows Terminal, where it sideloads a signed binary, pulls payloads out of PNG files and leaves a reverse tunnel behind.

Publishers:microsoft.com

Reality

Evidence62
Adoption38
Hype gap+12
Incentives55

Confidence57

ClickFix paste social engineering — Clarity Today