PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

Path of Exile 2 can complete login and character selection normally, then fail as soon as the next area begins loading. The ...

UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored ...

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in ...

First phishing, then a fake captcha and a terminal command – this is how the cyberattack on Berlin proceeded, according to ...

Crooks are deploying cheeky browser-in-the-browser techniques to trick victims into downloading RMM tools.

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Chrome zero-day CVE-2026-85046 is under active attack as the sixth actively exploited Chrome vulnerability of 2026. A type confusion flaw in Chrome's V8 JavaScript engine lets attackers run code ...

Hackers hide AsyncRAT in Windows charmap.exe, using PowerShell and fake invoice files to evade detection and gain remote ...

Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...

Elastic Security Labs has uncovered a long-running malware operation that plants fake browser extensions inside Chrome and ...