The vulnpocalypse is upon us, dear reader. Microsoft delivered a record number of patches to address 974 CVEs in its own products this month, including two bugs that Redmond says are already under ...

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Over the past few years, browsers have continuously evolved. Originally, they were purely display tools for HTML and media. With JavaScript, WebAssembly, WebGL, and WebGPU, they have become ...

Google has pushed out an emergency update for Chrome after confirming that hackers were already exploiting a previously ...

CISA has added a critical Google Chromium V8 type confusion vulnerability, tracked as CVE-2026-85046, to its Known Exploited ...

Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...

Proofpoint identified the BlueMoon exploit kit being used by at least four hacking groups, some linked to Chinese state ...

Google has released a major security update for Chrome that fixes 230 vulnerabilities. One of them is concerning because Google says it is already being ...

Google fixed Chrome's seventh actively exploited zero-day of the year on September 8, and attackers were already using it ...

Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development.

Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

A few weeks back we spotted Microsoft’s Exchange team admitting that AI has found so many bugs it hasn’t found time to ...