Over 5,400 legitimate websites now serve fake CAPTCHA scams that trick users into pasting malware commands into Windows Run ...

China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT; Tencent fixed the issue in version 16.3.0.3498 ...

JSCeal can steal browser credentials, replay Google sessions using stolen cookies, and modify traffic for cryptocurrency ...

A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject ...

Proofpoint hat eine Spearphishing-Kampagne entdeckt, bei der staatlich unterstützte Spionagegruppen ein Exploit-Kit namens ...

Google has pushed out another urgent update for its Chrome browser with all users urged to restart their browsers.

Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.

Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on ...

Google has patched 230 vulnerabilities on Tuesday, including another actively exploited Chrome zero-day bug, the seventh such ...

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...

Google kicks off its new two-week release cadence with Chrome 153, patching an active zero-day vulnerability and resolving ...