Okta has released security updates for three high-severity vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta ...

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on targeted systems.

OpenAI launched the public beta of its "Agents API" for building AI agents on September 10. The company is offering the same execution ...

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Proofpoint researchers identified BlueMoon, an exploit kit used by at least four espionage-linked threat clusters since late ...

Proofpoint says at least four espionage groups rapidly adopted BlueMoon, chaining Chrome V8 patch-gap flaws with a Windows LPE to deliver malware including GemStone and ShadowPad.

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...

Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

AWS has published a reference implementation for testing AI agents through GitHub Actions, allowing developers to run ...

Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...