ClickFix has become hugely successful as it relies on a simple yet effective method, which is to entice a user into infecting ...

Tsundere botnet spreads via MSI and PowerShell installers, using Ethereum-based C2 rotation and game-themed lures to target ...

China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage ...

The vulnerability is now tracked as CVE-2025-13223 and has a severity score of 8.8/10 (high). "Type Confusion in V8 in Google ...

Agent HQ provides a single location for managing both local and remote coding agents and introduces a plan agent that breaks ...

Google has issued an urgent warning to billions of Chrome users worldwide to alert them to a zero-day flaw. Here’s what it is and how to secure your device.

Chrome has suffered two other confirmed zero days in the V8 engine in 2025, from a tally of seven across Chrome as a whole. The V8 flaws were CVE-2025-5419 in June and CVE-2025-10585 in September.

A new ClickFix variant ratchets up the psychological pressure to 100 and addresses some technical mitigations to classic ClickFix attacks.

The long-running Contagious Interview campaign is now hiding BeaverTail and InvisibleFerret payloads inside JSON storage ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

Rated as a high security flaw, the zero day labeled CVE-2025-13223 is described as: "Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap ...

Over the last month, Barracuda threat analysts have seen the following notable developments in email-based threats targeting ...