A one-click Sogou Input Method flaw let UNC3569 deploy GRAYRABBIT backdoor, enabling remote code execution and data theft.

Shopify's 2026 decision to abandon React Native for Swift and Kotlin sent a chill through the mobile development world, but the framework's most ...

A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

Okta has released security updates for three high-severity vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta ...

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on ...

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Proofpoint researchers identified BlueMoon, an exploit kit used by at least four espionage-linked threat clusters since late ...

Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...

Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

AWS has published a reference implementation for testing AI agents through GitHub Actions, allowing developers to run ...

The vulnpocalypse is upon us, dear reader. Microsoft delivered a record number of patches to address 974 CVEs in its own products this month, including two bugs that Redmond says are already under ...