Attackers are scanning internet-exposed Vite development servers for environment files, cloud credentials and infrastructure configuration.
A Telegram Desktop flaw lets bots inject JavaScript into exported chats, enabling data theft and page manipulation.
Adam Carmi, Applitools CTO and Co-Founder, will demo these new features and how they bridge the Probabilistic Validation Gap in agentic workflows during a live webinar on September 24, 2026. Register ...
UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.
Shopify's 2026 decision to abandon React Native for Swift and Kotlin sent a chill through the mobile development world, but the framework's most ...
A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...
Okta has released security updates for three high-severity vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta ...
BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on ...
BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...
Proofpoint researchers identified BlueMoon, an exploit kit used by at least four espionage-linked threat clusters since late ...
Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.
A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results