A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.

A phishing campaign active since June is abusing Microsoft s legitimate mshta exe utility to run malicious HTML Application files profile infected Windows ...

A performance budget sets hard numeric limits on page weight, JavaScript, fonts and Core Web Vitals before design begins, so speed becomes a constraint your ...

Thousands of hacked sites use fake CAPTCHA prompts to trick visitors into running malware. Learn the warning signs before ...

GitHub Advanced Security released REST API endpoints on September 10 giving enterprise teams programmatic control over ...

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on ...

China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT; Tencent fixed the issue in version 16.3.0.3498 ...

China-linked threat actors have been caught chaining two Google Chrome flaws with a Windows kernel vulnerability to compromise selected targets including ...

The Combat Sports Authority cancelled the event, saying it had not complied with the rules required for such an event.

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Dependency scanning protects modern codebases from open-source risks by auditing direct and nested packages inside the CI/CD pipelines.