Telegram Desktop fixed a flaw that let bot messages embed JavaScript in HTML exports to read or alter messages; old exports ...

UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

Threat groups are leveraging stolen AI credentials and victim cloud environments to launch distillation attacks and build AI-powered exploitation and post-exploitation pipelines.

Crooks are deploying cheeky browser-in-the-browser techniques to trick victims into downloading RMM tools.

A high-severity Telegram Desktop flaw allowed malicious JavaScript in bot-created buttons to steal chat content when conversations were exported as HTML.

A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

Threat actors are actively abusing the legitimate Windows utility mshta.exe to execute malicious HTML Application (HTA) files ...

Claude can sort CRO data, surface patterns, and organize findings, but human judgment is still needed to validate conversion ...

The campaign allegedly involved an OpenAI agent swarm and abused package documentation systems, metadata fields, and registry ...

Elastic Security Labs has uncovered a long-running malware operation that plants fake browser extensions inside Chrome and ...

Jeremiah Lowin, the engineer behind the FastMCP framework and a key figure at Prefect, argues that the future of AI-driven interfaces is not a ...

When a victim opens the HTA, Windows invokes mshta. exe, a legitimate Microsoft utility designed to execute HTML Applications. The malicious file pushes its own window off-screen and loads remote ...