Executive Summary We uncovered a High severity security vulnerability CVE-2026-0628 in Google’s implementation of the new Gemini feature in Chrome. This vulnerability allows the attacker…
We often describe cases of malware distribution under the guise of game cheats and pirated software. Sometimes such methods are used to spread complex malware…
We at Mozilla believe that people deserve privacy and one of the most important pieces of web privacy is provided through ubiquitous encryption. Because of…
Regardless of where you’re at in your application security maturity, dynamic application security testing (DAST) is a program staple in a few key ways: It…
Most SOC teams don’t struggle with what they need to automate — they struggle with where to start. Between complex playbooks, brittle integrations, and the…
Tycoon2FA, an underground cyber criminal phishing service that enabled its subscribers to intercept live authentication sessions, capturing credentials, one-time passcodes and active session cookies to…
Telstra is only weeks away from launching an agentic AI pilot to be led out of its customer sales and commerce engineering group as it…
FalconID is now generally available, bringing phishing-resistant MFA to the CrowdStrike Falcon® platform and advancing CrowdStrike’s leadership in identity security. Adversaries continue to use legitimate…
Encoder exposed! Some of our releases add new ways in; this one adds new ways to stay in. There are, of course, still new…
Most of the Firefox User Interface (UI), including the address bar and the tab strip, are implemented using standard web technologies like HTML, CSS and…
Starting from the third quarter of 2025, we have updated our statistical methodology based on the Kaspersky Security Network. These changes affect all sections of…
Executive Summary On Feb. 28, 2026, the United States and Israel launched a significant joint offensive code named Operation Epic Fury (U.S.) and Operation Roaring…
