browser
-
Security Advisory: Discovery of “Auraboros,” an Unauthenticated, High-Capability RAT Framework
In a significant finding for the threat intelligence community, a previously undocumented Remote Access Trojan (RAT) framework, dubbed Auraboros, has…
Read More » -
Claude Mythos Breach Exposes Critical Flaw in AI Security Supply Chains
In a significant blow to the specialized AI security sector, a group of unauthorized actors has successfully bypassed multi-layered access…
Read More » -
The Human Vulnerability: Deconstructing Sapphire Sleet’s macOS Social Engineering Campaign
In the evolving landscape of cyber warfare, the most dangerous vulnerability isn’t always found in a line of code—it’s found…
Read More » -
CISA Issues Urgent Alert Over Compromised Axios NPM Package
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory regarding a sophisticated software supply chain attack targeting…
Read More » -
Stealth by Design: Unpacking the Sophisticated ‘Stealtok’ Malicious Extension Campaign
In a sobering reminder of how easily trust can be exploited, security researchers at LayerX have exposed a highly coordinated…
Read More » -
Critical FortiSandbox Vulnerability CVE-2026-39808: Public Exploit Now Available
A proof-of-concept (PoC) exploit has been publicly released for a critical security flaw in Fortinet’s FortiSandbox, putting thousands of networks…
Read More » -
Sapphire Sleet’s Fake Zoom SDK Preys on macOS Users Through Social Engineering
A sophisticated cyber campaign orchestrated by North Korean threat actor Sapphire Sleet reveals a significant shift toward social engineering over…
Read More » -
ATHR: Integrated Telephony-Based Attack Infrastructure and AI-Driven Voice Social Engineering in TOAD Attack Campaigns
Cybercriminal threat actors are increasingly leveraging telephone-oriented attack delivery (TOAD) methodologies to circumvent conventional email security infrastructure. This trend is…
Read More » -
Ukrainian Authorities Warn of Surge in Targeted Cyberattacks on Government and Healthcare by UAC-0247
A significant surge in cyberattacks has been detected targeting Ukrainian local governments and municipal healthcare institutions, particularly clinical and ambulance…
Read More » -
Chrome’s Privacy Flaws Exposed: How Fingerprinting & Headers Bypass Your Safeguards
A new technical review of Google Chrome’s privacy posture reveals that modern tracking no longer depends solely on cookies. Websites…
Read More » -
Google Releases Critical Chrome Security Update Patching 31 Vulnerabilities
Google has released an urgent security update addressing a substantial vulnerability landscape in its Chrome web browser, patching 31 distinct…
Read More » -
Your Privacy Opt-Out Is Being Ignored by Google, Microsoft, and Meta
A bombshell independent audit has caught some of the world’s biggest technology companies red-handed — continuing to track users who…
Read More » -
Microsoft Releases April 2026 Patch Tuesday Update: 168 Vulnerabilities Patched Including Active Zero-Day Exploit
Microsoft has addressed a critical security gap by releasing its April 2026 Patch Tuesday updates, covering 168 vulnerabilities across its…
Read More » -
Janela RAT: Financial Cybercrime Campaign Using Fake MSI Installers and Malicious Browser Extensions
Janela Remote Access Trojan (RAT) campaigns leverage fake Windows MSI installers and malicious browser extensions to infiltrate financial networks and…
Read More »