Technology
Beware of this sneaky Google attack that steals your expired cookies
‘CyberGuy’: Big Brother in the Big Apple
NYC drivers face a $15 daily congestion fee for entering the toll congestion zone south of 60th Street, monitored by license plate readers. Kurt “CyberGuy” Knutsson gives the details.
A new exploit threat lets hackers access your Google account using expired cookies that contain your login information. The exploits, which were discovered late last year, target session cookies, which only have a limited lifespan. However, they can “revive” those cookies, putting your personal information at risk.
A hacker named PRISMA first revealed they found a way to bring back expired Google session cookies. Since then, cybersecurity firm CloudSEK discovered an exploit in a program that allows users to synchronize their Google accounts across multiple devices. Now, hackers are using that exploit to steal your login and other information. Here’s a breakdown of how it all unfolded and how you can protect yourself.
CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS AND EASY HOW-TO’S TO MAKE YOU SMARTER
Google Chrome start-up page (Kurt “CyberGuy” Knutsson)
Exploiting Google’s MultiLogin
As reported by BleepingComputer, certain malware strains have discovered a backdoor into Google’s authentication system. The vulnerability lies in the MultiLogin endpoint, which remains undocumented and largely unknown to the public. This clandestine gateway enables threat actors to revive expired authentication cookies, granting unauthorized access to users’ Google accounts.
Google Chrome start-up page (Kurt “CyberGuy” Knutsson)
MORE: BEWARE OF THIS MCAFEE GOOGLE CHROME AD SCAM
The role of session cookies
Before we dive deeper, let’s understand the role of session cookies. These specialized browser cookies contain authentication information. If you’ve ever experienced the convenience of returning to a site without re-entering your credentials, you’ve encountered session cookies. However, their design intentionally limits their lifespan to prevent prolonged unauthorized access.
MORE: HOW GOOGLE’S DATA CAN MAKE YOU A SUSPECT IN A CRIME YOU DIDN’T COMMIT
The Lumma and Rhadamanthys connection
In November of last year, cybercriminals associated with the Lumma and Rhadamanthys info-stealing malware strains made a bold claim: they could resurrect expired Google Authentication cookies stolen during cyberattacks. Armed with these seemingly defunct cookies, a hacker gains entry to a victim’s Google account, even if the user has logged out, reset their password, or their session has expired.
PRISMA’s revelation
The exploit’s origins trace back to a Telegram post by a threat actor known as PRISMA. In October, they unveiled their discovery: a method to restore Google authentication cookies that had reached their expiration date. This revelation set the stage for further investigation.
CloudSEK’s investigation
Enter CloudSEK, a cybersecurity firm committed to predicting and preventing cyberattacks. Their researchers took on the challenge, reverse engineering the exploit. Their findings revealed that the MultiLogin endpoint served as the linchpin for the hackers. This undocumented feature facilitates account synchronization across various Google services, making it an ideal target for malicious actors’ nefarious activities.
Google Chrome start-up page (Kurt “CyberGuy” Knutsson)
MORE: GOOGLE FINALLY ADMITS DATA COLLECTION IN CHROME’S INCOGNITO MODE
Protecting against MultiLogin exploit
The exploitation of MultiLogin raises serious concerns for those of you who are Google account holders. To safeguard against this threat, consider the following steps:
1) Sign out of the affected browser: Google is aware of this issue and has taken action to secure compromised accounts. Google’s recommendation is to simply sign out of the affected browser to revoke session cookies.
2) Enhanced Safe Browsing: Enable Enhanced Safe Browsing in Chrome for additional protection against malware and phishing attacks.
On your computer:
- Open Google Chrome on your computer
- Click the initial in the top-right corner of the browser window
- Tap Manage your Google Account
- Click Security on the left
- Under Enhanced Safe Browsing for your account – make sure it is turned On
On your smartphone:
- Open Google Chrome on your computer
- Click the initial in the top-right corner of the browser window
- Tap Google Account
- Click Security
- Scroll down and under Enhanced Safe Browsing for your account – make sure it is turned On
3) Regularly change passwords: Regularly change your Google password to keep your account safe from hackers. If you struggle with creating new passwords, consider using a password manager.
4) Have good antivirus software on all your devices: The best way to protect yourself from having your data breached is to have antivirus protection installed on all your devices. Choose the best option for your PC, Mac, iPhone or Android smartphone. Having good antivirus software actively running on your devices will alert you of any malware in your system, warn you against clicking on any malicious links in phishing emails and ultimately protect you from being hacked. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.
Kurt’s key takeaways
In light of the recent exploits targeting Google accounts through resurrected session cookies, it’s imperative to strengthen our defenses against such cyberthreats. From the initial discovery by PRISMA to the subsequent investigations by CloudSEK, the vulnerabilities in Google’s MultiLogin endpoint have now been exposed.
To protect your account, ensure you sign out of affected browsers, enable Enhanced Safe Browsing, regularly update passwords, and have good antivirus software across all your devices. By implementing these security measures, you can thwart attempts to compromise your online privacy and safeguard your digital identities.
How important do you think it is for technology companies like Google to continually update and enhance their security protocols to protect you from evolving cyberthreats? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover.
Answers to the most asked CyberGuy questions:
Copyright 2024 CyberGuy.com. All rights reserved.
Technology
China’s Z.ai claims it can match Mythos on cybersecurity
China’s Zhipu AI (Z.ai) released its open-weight GLM-5.2, and some researchers have claimed that it matches Mythos in certain bug-finding and cybersecurity scenarios. While GLM lags behind models from Anthropic and OpenAI in other, more general tasks, it seems that China has dramatically reduced the gap in the capabilities between its models and those of the US.
This level of advancement is particularly concerning to the US government, which has worked to restrict China’s access to powerful models like Anthropic’s Mythos and Fable, as well as the hardware necessary to train and run them. The Trump administration views Mythos and other advanced AI models capable of identifying vulnerabilities as serious national security threats. Recently, OpenAI unveiled GPT-5.6, which has also raised concerns about its potential for misuse and has limited access to it.
Because GLM is an open-weight model, it can be downloaded and run by anyone on readily available hardware. That gives it great flexibility and allows power users deep access, but it also makes it ripe for abuse by bad actors who can run it with little oversight.
Technology
Midjourney’s wild body scanner scans you in water
Full-body MRI scans grow in popularity
‘Fox & Friends’ explores the rising trend of full-body MRI scans. Dr. Dan Doran touts these scans as crucial for early disease detection, highlighting their ability to find conditions before symptoms appear. Fox News medical analyst Dr. Marc Siegel warns about the high cost of scans, the potential for false positives and the current limitations of AI in interpreting comprehensive results.
NEWYou can now listen to Fox News articles!
Midjourney made its name by turning text prompts into stunning AI images. Now it wants to scan your body while you stand in warm water. Yes, really.
The company has announced Midjourney Medical, a new division focused on a full-body ultrasound scanner. Midjourney says the goal is to make body scans faster, cheaper and easier to get.
The basic idea is this. You step onto a platform in a shallow pool. Then the platform slowly lowers you through water while underwater sensors send sound waves through your body. The system listens for how those waves bounce back and change. From there, computers build a 3D map of what is happening inside your body.
Midjourney says the scan could take about 60 seconds. No radiation. No powerful magnets. Just water, sound and a huge amount of computing power. That sounds amazing. It also raises a big question: Can a company known for AI art really help change medical imaging?
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
YOUR HEALTH APP MAY BE FAILING YOU
A person stands on Midjourney’s glowing scanner platform before being lowered into water for a full-body ultrasound scan. (Midjourney)
What is the Midjourney body scanner?
Midjourney describes its body scanner as a water-based full-body ultrasound system. The company calls the technology “Ultrasonic CT.” Instead of lying inside a hospital scanner, you would step into a shallow pool. Then a platform would lower you through a ring of ultrasound sensors.
Those sensors send sound waves through your body from many angles. The system studies how those waves change as they pass through tissue. Then, powerful computers turn that information into a detailed body map.
Midjourney says its first scanner will focus on body composition maps. That could include details about muscle, fat and other body structures. That part is important because body composition fits more clearly into a wellness starting point. Diagnostic medical uses would require regulatory clearance.
How the Midjourney body scanner works
The scanner starts with water because ultrasound travels well through it. You stand on a platform connected to rails. Then the platform slowly lowers you at about 2 inches per second. As your body moves downward, it passes through a ring of tiny sensor elements. Midjourney describes those elements as both tiny speakers and tiny microphones.
Each one sends ultrasonic sound waves into the water and your body. Then it records what comes back. Think of it as echolocation with extreme detail. A dolphin uses sound to understand what sits nearby. This scanner uses sound from many angles to build an image of your body.
Midjourney says the system produces a massive amount of data every second. That data then moves to a large computer cluster, where the system turns sound-wave changes into images. Those changes reveal important differences.
Sound moves through skin, fat, muscle, bone and other tissue in different ways. The scanner studies those shifts and uses them to reconstruct a 3D map.
Why Midjourney built a medical scanner
At first, this move feels strange. Midjourney is the company people know for AI images, not medical hardware. But the technical connection makes sense. This scanner needs huge amounts of computing power. It also needs advanced image reconstruction. Midjourney already works with large image systems and AI models.
The company also describes itself as a research lab. It says it has no investors and gets support from its community. That gives Midjourney room to chase ideas that look unusual from the outside. A water-based body scanner inside a spa definitely qualifies.
CHINA’S BRAIN CHIP BREAKTHROUGH RAISES BIG QUESTIONS
Inside the scanner, sensors and wiring support the sound-wave system that Midjourney says can help build a 3D body map. (Midjourney)
Why the Midjourney Spa matters
Midjourney wants the scanner to feel more like a spa visit than a medical appointment. Its first Midjourney Spa is planned for San Francisco at the end of 2027. The concept includes hot tubs, saunas, cold plunges and scanning rooms with pools of golden light.
That changes the whole feel of medical imaging. No cold hospital room. No loud MRI tube. No long appointment that wears you and me out.
Instead, the company wants people to get scans more often. In Midjourney’s view, you could track body changes over time, almost like you track sleep, steps or heart rate today.
Midjourney body scanner vs. MRI
Midjourney makes a bold comparison to MRI. The company says its scanner could create images that look similar to today’s MRI scans, but much faster.
MRI machines can show remarkable detail. Doctors use them for serious medical questions. They also require trained staff, approved protocols and careful interpretation.
Midjourney’s scanner has not replaced MRI machines. For now, the company plans to start with body composition maps. That still could be useful. A quick scan may help someone better understand changes in muscle, fat or other body measurements.
Yet medical diagnosis takes more than an impressive scan image. Doctors need proof. Regulators need data. Patients need clear answers about what the scan can find, what it can miss and what the results actually mean.
Why FDA clearance matters for the Midjourney body scanner
Medical imaging has a high bar for a reason. A scan can shape major health decisions. Midjourney says it plans to submit test results to the FDA for added capabilities. That process will help determine what the scanner can legally claim.
A wellness scan and a diagnostic scan serve different roles. A wellness scan may help you learn more about your body. A diagnostic scan may help guide treatment for a disease, injury or medical condition.
Each of these requires different evidence. They also carry different risks. For example, a scan might spot something unclear. That could send someone into follow-up tests, specialist visits and weeks of worry.
On the other hand, a scan might miss something important and give someone false confidence. That is why doctors will want strong clinical data before they trust this technology for serious medical decisions.
Midjourney says its water-based scan could take about 60 seconds while avoiding radiation and powerful magnets. (Midjourney)
What to watch next for the Midjourney body scanner
The big thing to watch is proof. The scanner may look impressive, but medical claims need strong testing behind them.
FDA clearance will be another key step. If Midjourney wants this to do more than body composition maps, regulators will need to see solid data.
The first San Francisco spa will also tell us a lot. Once people actually use it, we will learn more about comfort, cost, safety and privacy.
Doctors will have the final say in whether this becomes a trusted medical tool. If the science holds up, this could be a huge shift. If it does not, it may stay more of a high-tech wellness experience.
What this means for you
If the Midjourney body scanner works, it could make health scans feel much less intimidating. That alone could be a big deal. Many people avoid scans because they cost too much, take too long or feel stressful.
A 60-second water-based scan could lower that barrier. It could also help people track changes in their bodies over time.
Privacy also needs serious attention. A full-body scan contains deeply personal information. Before anyone signs up, they should know who stores the data, who can see it, how long it lasts and whether it can be shared.
For now, treat this as a fascinating early project. Do not treat it as a replacement for medical imaging that your doctor orders.
Watch the CyberGuy Live replay: Lock Down Your Phone in 30 Minutes
Your phone holds your email, passwords, photos, banking apps and personal data. In this free CyberGuy Live replay, Kurt the CyberGuy walks you step by step through simple phone security fixes you can do at your own pace. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Watch the replay and get our checklist here:CyberGuyLive.com
Kurt’s key takeaways
Midjourney’s body scanner is one of the wildest health tech ideas I’ve seen in a long time. You step into warm water, get lowered through ultrasound sensors and come out with a body map in about a minute. That could make scans feel a lot less stressful. It could also help people track changes in their bodies over time. However, this still needs proof. Midjourney needs clinical data, FDA clearance for medical uses and clear privacy rules before anyone treats this like a trusted medical tool. I love the big idea. I just want the science, safety and privacy to be as impressive as the technology.
Would you step into a water-based body scanner at a spa if it promised to show you what is happening inside your body? Let us know by writing to us at Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
The Cube is Jim Henson’s little-known proto-Black Mirror masterpiece
I’m sure we’re all familiar with Dark Crystal, so we know that Jim Henson can be weird and tackle slightly more mature subject matter. But there is little in his oeuvre that is quite as mind-bending as the Muppetless The Cube. This 1969 teleplay was produced for an NBC anthology series called Experiment in Television, which featured, appropriately enough, various experimental films, plays, and documentaries. One episode even featured Marshall McLuhan explaining his oft-cited theory that “the medium is the message.”
Even among all these oddities, however, Jim Henson’s The Cube stands out. It’s a 53-minute bottle film — taking place almost entirely in a single room. A man awakes in a white cube, unsure of where he is or how he got there. There are no windows, no door. Just walls of white panels.
It doesn’t take long for someone to open a section of the wall and bring in a stool for our nameless man in the cube. But when he closes the “door” behind him, our protagonist can’t open it back up. And thus begins the parade of people, dozens of them, taking turns going in and out of various invisible doors in the titular cube.
The interactions start off strangely enough — why is there strawberry jam on the stool? Who is this woman who claims to be the protagonist’s wife even though he doesn’t recognize her? But they quickly escalate, calling into question the nature of reality, our protagonist’s sanity, and raising questions about what the cube is exactly. Jim Henson himself even makes an uncredited cameo as the voice of a gorilla in a tutu.
As people come and go, delivering supplies to the man, harassing him, or even attempting to seduce him, the room changes around him inexplicably. Beds, couches, fully stocked liquor cabinets, and other furniture mysteriously appear. A full band slips in and sings a song with the line “you’ll never get out ‘til you’re dead,” before it’s revealed to be a recording as the record skips repeatedly on the word “dead.”
The Cube offers many questions but no answers. Is the man living in a simulation? Is he on TV? Are the people around him actors? Is any of it real at all? Does matter exist?
Even in a post-Twilight Zone world, The Cube feels uniquely bizarre, more akin to the modern dystopian anthology series Black Mirror than anything else. While it’s not true lost media, it remains relatively obscure. It only aired twice, there’s a sold-out DVD listing on Amazon, and it only occasionally makes an appearance on streaming services in any official capacity.
Your best bets right now are a pair of YouTube uploads, both embedded above. One is a much higher-quality transfer of a black-and-white kinescope film with remastered audio. Unfortunately, it also cuts out most of the song due to copyright. The other upload is full color and retains the song, but is a generally lower quality rip with muddier image and audio. Regardless of which one you choose, it’s a wild and thoroughly enjoyable ride that shows just how twisted the mind of Jim Henson could be.
-
Oregon26 seconds agoMissing, endangered 2-year-old last seen in Portland area
-
Pennsylvania6 minutes agoMSU basketball extends offer to Pennsylvania 4-star center prospect
-
Rhode Island13 minutes ago
RI Lottery Numbers Midday, Numbers Evening winning numbers for June 28, 2026
-
South-Carolina15 minutes agoSouth Carolina Lottery Pick 3, Pick 4 results for June 28, 2026
-
South Dakota21 minutes ago
SD Lottery Millionaire for Life winning numbers for June 28, 2026
-
Tennessee28 minutes ago
TN Lottery Cash 3 Evening, Cash 4 Evening winning numbers for June 28, 2026
-
Texas30 minutes agoAfter historic floods, Texas Hill Country Little League is back
-
Utah36 minutes agoSculptor to build $55 million monument depicting American history in Utah