Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

Researchers discovered a Chrome vulnerability that allowed malicious extensions to hijack the Gemini AI panel and access sensitive system resources.

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain attacks on developers.

A New Jersey toddler's death after falling more than 20 stories​ has prompted new legislation designed to ensure windows are properly guarded in apartment buildings across the state.

Microsoft has updated Copilot on Windows to open web links in an in-app side pane, bypassing users' default browser settings without offering an opt-out.