A one-click Sogou Input Method flaw let UNC3569 deploy GRAYRABBIT backdoor, enabling remote code execution and data theft.

Over 5,400 legitimate websites now serve fake CAPTCHA scams that trick users into pasting malware commands into Windows Run ...

A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

GitHub Advanced Security released REST API endpoints on September 10 giving enterprise teams programmatic control over ...

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on ...

The Combat Sports Authority cancelled the event, saying it had not complied with the rules required for such an event.

Someone is afraid of missing out, as defenders rush to patch things up.

Google Threat Intelligence Group says a financially motivated actor used a multi-agent AI framework to plan, build, and run a ...

Victor Mesa Jr. had two hits, including a home run, Griffin Jax gave up only two hits and one run in five innings and the ...

Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code.

Engineer Tetsuya Wakita built vault-mcp, an open-source system that stores personal AI context in a user-owned Git repo and ...