SPECTRE backdoor, deployed by Chinese-speaking hacker group UAT-10147, blinds CrowdStrike Falcon, SentinelOne, and Microsoft ...

Not every extension from the Chrome Web Store works properly. Some rely on desktop APIs that don't work well on phones. But ...

Kimsuky uses phishing and a malicious Chrome extension to steal Gmail messages, attachments, and control infected computers.

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

A critical vulnerability in the Node.js sandboxing library, isolated-vm, has exposed a serious risk to AI agents, automation ...

A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.

VoidZero has launched the beta of Vite+, a unified web development toolchain. It combines runtime, package management, and ...

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

JavaScript Explicit Resource Management lands in Safari Technology Preview 250, completing cross-browser support across V8, ...

The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...