Do you use the Chrome extension "Save image as Type?" If so, you are one of more than one million users who woke up this ...

How can an extension change hands with no oversight?

The campaign, observed in February 2026, has been assessed to share overlaps with a prior campaign mounted by Laundry Bear, a ...

DRILLAPP JavaScript backdoor targets Ukraine in Feb 2026, abusing Edge debugging features to spy via camera, microphone, and ...

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...

New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

According to the FBI's website, the agency's Seattle branch wants to identify potential victims who installed Steam games ...

Powered by the TypesScript-native runtime Bun, Electrobun improves Electron with a smaller application footprint and built-in ...

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...

It was a solid addition to my LLM-powered app stack ...

ActiveX is a Microsoft software framework that enables applications to share data across web browsers, enhancing ...