PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...
"BengalSEO used backlinks, DOM injection, DOM shuffling, and keyword stuffing to enable their operation through Black Hat SEO ...
Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in ...
Crooks are deploying cheeky browser-in-the-browser techniques to trick victims into downloading RMM tools.
BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...
Chrome zero-day CVE-2026-85046 is under active attack as the sixth actively exploited Chrome vulnerability of 2026. A type confusion flaw in Chrome's V8 JavaScript engine lets attackers run code ...
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension ...
Once installed, it can turn Google Chrome or Microsoft Edge into a persistent backdoor for stealing browser data, hijacking ...
Elastic Security Labs has uncovered a long-running malware operation that plants fake browser extensions inside Chrome and ...
Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...
Huntress researchers have uncovered two phishing attacks that combined convincing fake browser windows with legitimate remote ...
A Telegram Desktop flaw lets bots inject JavaScript into exported chats, enabling data theft and page manipulation.