LinkedIn Is Spying on Your Browser Extensions — Report
Every time you open LinkedIn in Chrome, Edge, Brave, or any other Chromium-based browser, hidden JavaScript embedded in the page quietly scans your i…
Latest Posts
Progress ShareFile Storage Zone Controller Hit With Critical Pre-Auth RCE Chain — Patch Now
Offensive security firm watchTowr has disclosed a critical two-vulnerability chain in Progress ShareFile's on-premises Storage Zone Controller (S…
WhatsApp Hunts Down Italian Spyware Operation, Warns 200 Targets
WhatsApp has taken action against an Italian surveillance company accused of building a convincing fake version of the messaging app and deploying it…
Android 17 Is Getting Quantum-Proof Locks — And It Goes All the Way Down to the Boot Sequence
Your Android phone is already under attack — just not yet. The threat is a class of computers that don't exist at scale today but are coming fast…
AI Found Three Critical Microsoft RCEs on Its Own — And Got the CVEs to Prove It
For the first time in the history of vulnerability research, an autonomous AI system has been formally credited with discovering critical remote co…
North Korean Hackers Behind Axios npm Attack — Says Google
The same North Korean threat group that deployed AI-generated deepfakes to trick cryptocurrency executives into handing over system access has now pu…
Chrome's WebGPU Engine Is Becoming Hackers' Favorite Target — Update Now
Google has patched a zero-day vulnerability in Chrome that attackers are already exploiting — and this time, the target isn't JavaScript or the b…
Anthropic's Claude Code source code exposed via npm package
A 59.8 MB JavaScript source map file — a debugging artifact that translates compressed, minified code back into readable source — was accidentally bu…
Opening a Single File in Vim Can Hand Attackers Full Control of Your System
A two-bug chain quietly sitting in Vim since version 9.1.1391 lets a malicious file execute arbitrary shell commands the moment you open it — no plug…
Axios Hack Alert: Malicious npm Versions Drop RAT on macOS, Windows, and Linux
Developers relying on axios — the JavaScript HTTP client installed over 300 million times weekly — woke up Tuesday to a nightmare scenario: two versi…