Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect ...

Uh-oh, e-commerce giant AliExpress has been caught running hidden, silent audio processes inside visitors' browsers to generate unique device tracking profiles without user consent.

A developer noticed that AliExpress uses the Web Audio API to identify devices via inaudible audio signals. The question is: ...

Kaspersky researchers found 92,000 malicious attacks disguised as AI services in 2026, with fake ChatGPT, Claude and Gemini ...

Microsoft links 30+ domains to MacSync Stealer, tracing recurring execution and chunked exfiltration of credentials and ...

The launch of the Googlebook is about a month away and I'm still exceptionally skeptical. In this week's Smart Mode ...

Chrome security update 151.0.7922.169/.170 patches 15 vulnerabilities, including two Critical sandbox-escape buffer overflows ...

A phishing campaign targeting cybersecurity conference attendees has been using Google Docs and other familiar online services to deliver malware, including a Windows payload that can install its own ...

ChainDrop hijacked 444 npm packages and 2B monthly downloads via a Claude Code hook. AI agents have collapsed the gap between ...

Google has released a Chrome desktop update fixing 15 security vulnerabilities, including 2 buffer overflow flaws rated ...

An AI-driven attack that compromised Asian government systems, cracked 85 accounts, and stole 2,500+ personnel records.

Fake Adobe Acrobat sites are hiding malware-as-a-service panels, using document lures to target Windows users with harmful ...