FROST uses JavaScript and OPFS SSD timing to identify websites at 88.95% F1, exposing cross-browser privacy leaks.

SVG phishing email attacks are bypassing enterprise email security gateways by hiding JavaScript inside image files and ...

D Yet another aggrieved bug hunter has leaked a vulnerability affecting a Microsoft product after becoming disillusioned with ...

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day ...

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP, simultaneously compromised Microsoft's durabletask Python ...

Eight innovative tools that are reimagining web applications and how we build them. Welcome to the Great Unbloating.

TL;DR Introduction At the start of this year, I wrote a blog on how 2025 was the ‘year of the infostealer’, and it doesn’t ...

To reach protected secrets, the macOS and Linux versions show a fake password dialog, then reuse the captured password to ...

Browser tabs tend to add up over time, but instead of closing them, you can stop the memory usage right from the source.

Ubiquiti released a new security bulletin detailing fixes for six security issues, including one rated 9.1 (critical) and one scoring a perfect 10.0 on the CVE risk scale. The vulnerabilities ...

Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...

The Committee recommended replacing daily cause lists with weekly schedules and permitting supplementary lists when necessary. The proposal seeks to enhance predictability and administrative ...