Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and ...

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.

Experts details PeckBirdy, a JavaScript C2 framework used since 2023 by China-aligned attackers to spread malware via fake ...

A new malicious campaign mixes the ClickFix method with fake CAPTCHA and a signed Microsoft Application Virtualization (App-V ...

Former Harvard President Lawrence H. Summers was once designated as a successor executor in convicted sex offender Jeffrey E. Epstein’s will, positioning him to oversee Epstein’s estate if the primary ...

A hot potato: Several widely installed browser extensions endorsed by both Google and Microsoft secretly captured detailed user interactions with AI chat platforms. According to findings released by ...

You know those memes about how there’s no such thing as a free VPN? Here’s the ultimate cautionary tale. A recent investigation by Tel Aviv-based security firm Koi uncovered a massive data harvesting ...

Browser extensions with more than 8 million installs are harvesting users’ complete and extended AI conversations and selling them for marketing purposes, according to data collected from the Google ...

President Trump is about to get the green light from the Supreme Court to proceed with his MAGA plan to dismantle the administrative state. At oral arguments last week in Trump v. Slaughter, the court ...

Deadline’s Read the Screenplay series spotlighting the scripts behind the awards season’s most talked-about movies continues with Apple Original Films and Warner Bros‘ F1, directed by Joseph Kosinski ...

Security researchers have found that Urban VPN Proxy, a widely used free browser VPN extension with millions of installs, has been collecting and exporting full AI chat conversations from users’ ...