browser

June 5, 2026

The Silent Observer: How Malicious Browser Extensions Are Exfiltrating Generative AI Conversations

A sophisticated wave of malicious browser add-ons is actively targeting users of leading generative AI platforms, including ChatGPT, Claude, Copilot,…
Read More »
June 5, 2026

Critical Vulnerability Chain Discovered in Microsoft Edge: A Deep Dive into Pwn2Own Findings

During the high-stakes environment of the Pwn2Own competition, security researcher Orange Tsai from the DEVCORE Research Team successfully demonstrated a…
Read More »
June 4, 2026

Precision Impersonation: How Click-Hijacking and TDS Ecosystems Weaponize Trusted Security Tools

Cybercriminals are currently executing a sophisticated campaign that weaponizes search engine optimization (SEO) and high-fidelity web clones to distribute malware.…
Read More »
June 3, 2026

Advanced Smishing Campaign Leverages Cloudflare Error Decoys for Global Evasion

A highly sophisticated smishing and phishing operation is currently targeting mobile users on a global scale. By impersonating over 260…
Read More »
June 3, 2026

Evolution via Rebranding: Deconstructing the ‘The Gentlemen’ Ransomware Leak

A deep dive into a recent data leak tied to The Gentlemen ransomware group reveals a sophisticated paradox in modern…
Read More »
June 3, 2026

Critical Security Advisory: HTTP Header Injection and Privilege Escalation in Apache ActiveMQ

Administrators managing Apache ActiveMQ environments are urged to prioritize immediate patching following the disclosure of two significant vulnerabilities: CVE-2026-42253 and…
Read More »
June 3, 2026

Critical Vulnerability in GitHub.dev: How Synthetic Keyboard Events Can Exfiltrate OAuth Tokens

A significant security flaw has been identified in GitHub’s browser-based development environment, github.dev. The vulnerability enables a sophisticated “one-click” attack…
Read More »
June 2, 2026

DATA, DLLs, and PlugX: Deconstructing Mustang Panda’s Latest Move

Recent threat intelligence reveals a sophisticated campaign by Mustang Panda, a China-nexus APT group frequently linked to espionage against government…
Read More »
June 2, 2026

Critical Command Injection Vulnerability Uncovered in TP-Link Archer BE Series Routers

Security researchers have identified a high-severity vulnerability within the web management architecture of TP-Link’s Archer BE450 and Archer BE7200 Wi-Fi…
Read More »
June 2, 2026

Technical Analysis: SolyxImmortal Python-Based Information Stealer Targeting Turkish Users

A sophisticated new threat, dubbed SolyxImmortal, has been identified as an active information stealer leveraging the Python programming language to…
Read More »
June 1, 2026

Turning Off the Cameras: How an Iran-Linked APT is Silencing .NET Telemetry Before It Starts

The threat landscape is shifting from simple payload delivery to sophisticated runtime manipulation. Recent intelligence highlights a significant escalation in…
Read More »
May 30, 2026

Hardening the Session Lifecycle: Google Rolls Out Device Bound Session Credentials (DBSC) for Chrome on Windows

Google has reached a significant milestone in endpoint security by moving Device Bound Session Credentials (DBSC) into general availability for…
Read More »
May 29, 2026

JINX-0164: The Orchestrated Targeting of Crypto-Development Pipelines

A sophisticated new threat actor, identified as JINX-0164, has emerged with a specialized focus on infiltrating cryptocurrency organizations. Unlike broad-spectrum…
Read More »
May 29, 2026

Critical Security Advisory: Remote Command Execution Vulnerability Uncovered in OpenVPN Connect for macOS

OpenVPN has issued an urgent security patch for its macOS client following the discovery of a critical vulnerability capable of…
Read More »
May 29, 2026

Technical Analysis: Advanced DLL Side-Loading and Miner-RAT Hybrid Campaigns via Pirated Streaming Sites

Cyber adversaries are increasingly weaponizing illegal streaming ecosystems to distribute sophisticated malware, leveraging social engineering tactics centered around deceptive video…
Read More »
May 29, 2026

Evolution of a Supply Chain Threat: The js-logger-pack and MicrosoftSystem64 Malware Campaign

A highly sophisticated supply chain attack has been identified within the npm ecosystem, marking a significant shift in how malicious…
Read More »
May 28, 2026

FROST: Exploiting OPFS and SSD Timing for Cross-Browser Fingerprinting

Modern web browsers are designed with rigorous sandboxing to ensure that a website in one tab cannot “reach out” and…
Read More »
May 28, 2026

VaultJacking: How a Single 6-Digit PIN Can Compromise an Entire Google Credential Ecosystem

A sophisticated new phishing methodology, identified by researchers as “VaultJacking,” is sending shockwaves through the cybersecurity community. The vulnerability demonstrates…
Read More »
May 28, 2026

Immutable Malice: How the ClearFake Campaign Leverages BSC Smart Contracts for Resilient C2

A recent analysis of the ClearFake campaign reveals a sophisticated evolution in command-and-control (C2) architecture: the use of BNB Smart…
Read More »
May 28, 2026

The Click You Didn’t Make: How Motorola’s “Helpful” Feed Hijacked Your Amazon Sessions

Motorola is currently under intense scrutiny following revelations that its preinstalled “Smart Feed” application was performing silent, unauthorized interceptions of…
Read More »

Previous page Next page