CVE-2026-61500 is a critical authentication bypass in Rejetto HTTP File Server, discovered by Anthropic Mythos AI and exploited within 24 hours of public disclosure by a China-linked actor targeting ...

Ram’s 2027 1500 Rumble Bee 5.7 sold through its initial allocation in just 90 minutes, with more orders expected to open ...

Fresh Chrome and Firefox updates resolve over 100 vulnerabilities, including flaws leading to code execution and sandbox escape.

The attack targets streamers using OBS Studio version 32.2.2 or older, exploiting a cross-site scripting (XSS) flaw in custom Twitch chat overlays that insert viewer messages directly into the page as ...

Currently offered on BringATrailer is Cunningham C-4R Continuation chassis R5220, one of only four continuation cars completed during the Cunningham-backed revival program of the late 1990s. Better ...

Google has pushed out an emergency update for Chrome after confirming that hackers were already exploiting a previously unknown flaw in the browser’s core engine. It marks the seventh time this year ...

Proofpoint identified the BlueMoon exploit kit being used by at least four hacking groups, some linked to Chinese state interests, starting around August 28. The kit chains two Chromium V8 flaws with ...

Google has fixed 230 vulnerabilities in Chrome, including a zero-day flaw, CVE-2026-87491, with an in-the-wild exploit. “Google is aware that an exploit for CVE-2026-87491 exists in the wild,” the ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities. JSCeal is a cryptocurrency stealer that Check Point ...

JSCeal can steal browser credentials, replay Google sessions using stolen cookies, and modify traffic for cryptocurrency services.

Cybersecurity researchers have unpacked JSCeal , a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are ...

Google confirmed Thursday that attackers were already exploiting a type confusion flaw in Chrome's V8 JavaScript engine before a patch existed, marking the sixth zero-day of 2026 — and the third to ...