Google, Microsoft can get your passwords via web browser’s spellcheck
Enhanced Spellcheck features in Google Chrome and Microsoft Edge web browsers transmit form data, including personally identifiable information (PII) and…
Emotet botnet now pushes Quantum and BlackCat ransomware
While monitoring the Emotet botnet's current activity, security researchers found that the malware is now being used by the Quantum and…
New malware bundle self-spreads through YouTube gaming videos
A new malware bundle uses victims' YouTube channels to upload malicious video tutorials advertising fake cheats and cracks for popular…
Gay hookup site typosquatted to push dodgy Chrome extensions, scams
Gay hookup and cruising web app Sniffies is being impersonated by opportunistic threat actors hoping to target the website's users with many typosquatting domains…
Dotless domains: Home to the Internet’s shortest URLs
You may be familiar with some of the shortest internet domains used by major companies, such as m.me and fb.me from Facebook (Meta)…
Google Completes Acquisition of Mandiant
The threat-intelligence and cyberdefense company company will join Google Cloud and retain its brand name.
CISA orders agencies to patch Chrome, D-Link flaws used in attacks
CISA has added 12 more security flaws to its list of bugs exploited in attacks, including two critical D-Link vulnerabilities…
Microsoft Defender falsely detects Win32/Hive.ZY in Google Chrome, Electron apps
A bad Microsoft Defender signature update mistakenly detects Google Chrome, Microsoft Edge, Discord, and other Electron apps as 'Win32/Hive.ZY' each…
Google Chrome emergency update fixes new zero-day used in attacks
Google has released Chrome 105.0.5195.102 for Windows, Mac, and Linux users to address a single high-severity security flaw, the sixth…
Threat Actor Phishing PyPI Users Identified
"JuiceLedger" has escalated a campaign to distribute its information stealer by now going after developers who published code on the…