Benign add-ons can be weaponized with malicious updates after gaining user trust.

According to researchers at cybersecurity firm Koi, a China-based hacking syndicate known as ShadyPanda is actively ...

Millions of users have been affected by a spyware campaign that has hijacked popular browser extensions. Here’s how it works and how to stay safe.

Malicious Chrome and Edge extensions that once looked harmless have quietly turned into a sprawling spyware operation, ...

ShadyPanda is a dangerous new malware campaign that spent years turning browser extensions into spyware.

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

The China-based cyber-threat group has been using malicious extensions on the Google Chrome and Microsoft Edge marketplaces ...

A threat group dubbed ShadyPanda exploited traditional extension processes in browser marketplaces by uploading legitimate extensions and then quietly weaponization them with malicious updates, ...

You can prompt an AI model with a line of text, and it will generate most of the code needed to build an app, tool or website ...

Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

This week’s ThreatsDay Bulletin covers USB malware, fake crypto scams, CastleRAT, new cyber laws, and falling ransomware ...

Ahead of March's MWC, many are looking to Samsung and the launch of the Galaxy S26 Ultra at the next Galaxy Unpacked event.