Do you use the Chrome extension "Save image as Type?" If so, you are one of more than one million users who woke up this ...

How can an extension change hands with no oversight?

The campaign, observed in February 2026, has been assessed to share overlaps with a prior campaign mounted by Laundry Bear, a ...

DRILLAPP JavaScript backdoor targets Ukraine in Feb 2026, abusing Edge debugging features to spy via camera, microphone, and ...

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

Powered by the TypesScript-native runtime Bun, Electrobun improves Electron with a smaller application footprint and built-in ...

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...

It was a solid addition to my LLM-powered app stack ...

ActiveX is a Microsoft software framework that enables applications to share data across web browsers, enhancing ...

The Wikimedia Foundation suffered a security incident today after a self-propagating JavaScript worm began vandalizing pages ...

A compromised Chrome extension with 7,000 users was updated to deploy malware, strip security headers, and steal ...