ClickFix has become hugely successful as it relies on a simple yet effective method, which is to entice a user into infecting ...

New ClickFix attack variants have been observed where threat actors trick users with a realistic-looking Windows Update ...

Tsundere botnet spreads via MSI and PowerShell installers, using Ethereum-based C2 rotation and game-themed lures to target ...

China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage ...

The vulnerability is now tracked as CVE-2025-13223 and has a severity score of 8.8/10 (high). "Type Confusion in V8 in Google ...

Google has issued an urgent warning to billions of Chrome users worldwide to alert them to a zero-day flaw. Here’s what it is and how to secure your device.

The indie web began a few years after the end of GeoCities, which Yahoo shut down in 2009 (at least, in the US — GeoCities ...

Chrome has suffered two other confirmed zero days in the V8 engine in 2025, from a tally of seven across Chrome as a whole. The V8 flaws were CVE-2025-5419 in June and CVE-2025-10585 in September.

The long-running Contagious Interview campaign is now hiding BeaverTail and InvisibleFerret payloads inside JSON storage ...

A new ClickFix variant ratchets up the psychological pressure to 100 and addresses some technical mitigations to classic ClickFix attacks.

Researchers discovered that adding instructions for AI-powered browser assistants after the hash (#) symbol inside URLs can ...

Rated as a high security flaw, the zero day labeled CVE-2025-13223 is described as: "Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap ...