The Cybersecurity and Infrastructure Security Agency has ordered federal agencies to patch three critical iOS vulnerabilities that were exploited over a 10-month span in hacking campaigns conducted by ...

The Wikimedia Foundation suffered a security incident today after a self-propagating JavaScript worm began vandalizing pages and modifying user scripts across multiple wikis.

A final security update for Chrome 145 eliminates a handful of vulnerabilities, including some labeled critical.

Google speeds up Chrome’s release cycle to biweekly updates, a move affecting 3 billion users as AI-powered browsers like Atlas and Comet emerge.

A high-severity Chrome vulnerability has allowed malicious extensions to exploit the Gemini panel and gain elevated access to ...

WebMCP exposes structured website actions for AI agents. See how it works, why it matters, and how to test it in Chrome 146.

North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT ...

Warper 7.2 is a cutting-edge open-source React virtualization library utilizing Rust and WebAssembly for unmatched performance. With zero-allocation hot paths and O(1) circular buffer operations, ...

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...

The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...

Despite operating in a reduced capacity, the US cybersecurity agency CISA has issued a warning about ongoing attacks exploiting vulnerabilities in Chrome, Zimbra, ThreatSonar, and an ActiveX module.