UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

A new type of attack hijacks AI assistants built directly into a browser to access sensitive information, execute malicious ...

A China-linked threat actor has chained multiple software flaws to target non-governmental organizations. Security firm Volexity tracked the campaign under the name UTA0560. It observed the activity ...

AdBlock blocks known crypto miners by default, but c/side found 3,500+ sites running stealth WebSocket miners in 2025. What each extension still misses.

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

Malicious Chrome and Edge extensions stole crypto, credentials, sessions, and browser data in a campaign active since early 2024.

A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject ...

KREMLIN banking malware uses fake bank documents to steal passwords, cookies, and data from Chrome and Edge users in Brazil.

Elastic Security Labs has uncovered a long-running malware operation that plants fake browser extensions inside Chrome and ...

Google has released a new Chrome security update that fixes a zero-day vulnerability already being exploited in the wild. The ...

Cisco Talos has uncovered a cryptocurrency theft campaign that abuses Google Sheets and the Google Visualization API as a ...

OpenAI Astra cybersecurity model discovered two unpatched zero-day vulnerabilities in Chrome's V8 engine while taking a benchmark test -- without being asked. OpenAI has designated Astra as its first ...