Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are…
Tag: browser security
Adobe Acrobat Chrome Extension Flaw (CVE-2026-48294) Enables Silent WhatsApp Data Theft
Cybersecurity researchers at Guardio Labs have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension, which has over…
SASE Has an AI Blind Spot: Why Packet Inspection Falls Short in Modern Enterprise Security
For years, routing traffic through cloud proxies was sufficient for enterprise security. However, the shift to browser-based work, SaaS applications, and generative…
148 npm Packages Disguised as Student Proxies Turn Browsers Into a DDoS Botnet
A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service (DDoS) botnet for roughly…
Google and Microsoft Pull ModHeader Extension With 1.6 Million Installs After Dormant Data Collector Found
Google and Microsoft have removed the ModHeader browser extension from their respective web stores after security researchers discovered a dormant browsing-history collector…
Stripe OLT Analyzes ModHeader Extension’s Hidden Collector
UK security firm Stripe OLT analyzed the ModHeader extension and confirmed that a dormant browsing-history collector was embedded in the official, store-signed…
New Ghost Phishing Wave Using EvilTokens Bypasses Traditional Email Security
A recent EvilTokens campaign is exploiting a new 'ghost phishing' technique that hides malicious content until it decrypts inside the victim's browser,…
Nebula Security Discovers and Exploits Firefox JIT Flaw
Nebula Security, led by CEO Eten Zou, discovered CVE-2026-10702 and developed the IonStack exploit chain targeting Android. The company released public exploit…
Opera GX Flaw Allowed Silent Mod Installation to Exfiltrate Gmail Addresses via CSS Injection
Researchers discovered a critical vulnerability in Opera GX, the gaming-oriented browser, that enabled malicious websites to silently install browser mods and exfiltrate…
LayerX Previously Discovered ClaudeBleed Flaw
LayerX identified the ClaudeBleed confused-deputy vulnerability in Claude for Chrome earlier in 2026.