Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

Google has released a Stable-channel security update for Chrome after confirming that CVE-2026-85046, a high-severity ...

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 ...

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

Google patched 12 Chrome flaws, including an actively exploited V8 zero-day that could enable remote code execution through a ...

A one-click Sogou Input Method flaw let UNC3569 deploy GRAYRABBIT backdoor, enabling remote code execution and data theft.

Google has closed several security vulnerabilities in the Chrome web browser. Attackers are already exploiting one ...

Chrome users have another zero-day problem on their hands. Google has patched CVE-2026-87491, a vulnerability in the V8 JavaScript and WebAssembly engine that attackers are already exploiting in the ...

A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...