DRILLAPP JavaScript backdoor targets Ukraine in Feb 2026, abusing Edge debugging features to spy via camera, microphone, and ...

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

Powered by the TypesScript-native runtime Bun, Electrobun improves Electron with a smaller application footprint and built-in ...

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...

Ocean Network links idle GPUs with AI workloads through a decentralized compute market and editor-based orchestration tools.

Seemingly out of nowhere, the “Save image as Type” Chrome extension was marked for removal, with Google warning users ...

India’s Computer Emergency Response Team (CERT-In) has issued a high-risk alert to Google Chrome users, warning that outdated ...

House lawmakers were digging into Jeffrey Epstein’s sprawling financial portfolio Wednesday as a committee deposed his former ...

Storm-2561 uses SEO poisoning to push fake VPN downloads that install signed trojans and steal VPN credentials. Active since 2025, Storm-2561 mimics trusted brands and abuses legitimate services. This ...

New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

SpyOnWeb review, one of the best domain intelligence websites. Along with the top 5 best alternatives that can help you ...

How can an extension change hands with no oversight?