Adobe Acrobat Extension Flaw That Exposed WhatsApp Web Conversations
Adobe has patched a vulnerability in its Chrome Acrobat PDF extension allowing malicious websites to access information displayed in a victim’s WhatsApp Web.
Read MoreWeb Browsers
DuckDuckGo Adds Built-In YouTube Video Ad Blocking To Its Browser
DuckDuckGo has added built-in video ad blocking to its web browser.
Read MoreFake ChatGPT Desktop Downloads Are Infecting Windows And Mac Users With Infostealing Malware
A fake website impersonating OpenAI’s ChatGPT download page is distributing malware to both Windows and macOS users.
Read MoreUnderminr Abuse Disguises Malicious Traffic Behind Trusted Domains
Underminr is being actively abused to make malicious connections appear as if they are going to trusted domains, and 88 million domains are affected.
Read MoreFirefox Adds A Free Built-In Browser VPN In its 149 Update, With A 50GB Monthly Cap
Mozilla has rolled out a built-in VPN in Firefox 149 that provides up to 50GB of traffic per month for users signed in with a Mozilla account.
Read MoreChrome Bug Lets Malicious Extensions Access Mic, Camera, And Files Through Gemini’s Permissions
Researchers disclosed a high-severity Chrome vulnerability, CVE-2026-0628, that allowed malicious browser extensions to inject code into Chrome’s Gemini Live browser panel and gain access to its privileges.
Read MoreHashJack Indirect Prompt Injection Targets AI Browser Assistants
HashJack is a new indirect prompt injection technique that hides malicious instructions in URL fragments, so AI browser assistants – not the website – execute the attacker’s commands.
Read MoreFake Mac “Fix” Pages Push New Shamos Infostealer
Malvertising and fake Mac “help” pages are pushing Shamos, an AMOS-based infostealer, via copy-paste terminal commands that bypass Gatekeeper and steal credentials, notes, and crypto wallet data.
Read MoreChrome Utilizes AI Against Tech Support Scams in New Update
Chrome 137 will implement and use Gemini Nano to spot tech-support scam sites in real time for users who enable Enhanced Protection.
Read MoreMost Phishing Campaigns Evade Traditional Filters
Reliance on known IoCs makes many phishing attempts appear “zero-day,” giving attackers a window to bypass defenses before they are flagged.
Read More