Proofpoint researchers identified BlueMoon, an exploit kit used by at least four espionage-linked threat clusters since late ...

Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...

Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

Chrome users have another zero-day problem on their hands. Google has patched CVE-2026-87491, a vulnerability in the V8 JavaScript and WebAssembly engine that attackers are already exploiting in the ...

AWS has published a reference implementation for testing AI agents through GitHub Actions, allowing developers to run ...

Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...

Google has released a new security update for the Chrome browser, addressing a total of 12 vulnerabilities. Among these is a ...

JavaScript in the browser runs on a single main thread that handles user interactions, rendering, layout, and most ...

Spread the loveAlright, let’s cut straight to it. Google has just issued a really serious alert, telling every single Chrome ...