A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on ...

China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT; Tencent fixed the issue in version 16.3.0.3498 ...

Cyber extortion group FulcrumSec continues to find hardcoded credentials in public-facing IT infrastructure and exploit them as part of what it's dubbed a ...

Chrome moved to a two-week release cycle on 8 September and iOS 27 brings Safari 27 on 14 September. What the faster pace means for New Zealand business websites.

Google fixed Chrome's seventh actively exploited zero-day of the year on September 8, and attackers were already using it ...

EnableAll is an ecommerce accessibility platform that helps Shopify brands meet WCAG, ADA, and EAA compliance requirements ...

A few days ago I saw a screenshot on X of someone talking to what looks like a McDonald's support chatbot.They wanted to ...

Microsoft has equipped Visual Studio Code 1.137 with new features that focus on the automated use of agents and the ...

Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject ...

Chrome zero-day CVE-2026-87491 is under active attack. See what the V8 flaw can do, why the sandbox matters, and which Chrome ...