We look at websites every day without thinking about them, but“How is the color and shape of this button decided?”“Who ...

GLM-5.3, an open-weight model from the Chinese lab Zhipu AI, can build working cyber exploits on its own almost as well as ...

When building internal business systems, have you ever experienced a situation where the "screen developer" and the "server ...

Fresh Chrome and Firefox updates resolve over 100 vulnerabilities, including flaws leading to code execution and sandbox escape.

Anthropic finds Zhipu's GLM-5.3 writes end-to-end exploits almost as often as Mythos Preview, and simple tricks bypass its safeguards in most simulated tests.

Google已正式面向Windows、macOS与Linux平台推送了Google Chrome 154大版本更新。本次更新集中修复了多达108项安全漏洞，其中包含11个最高风险级别的“严重”（Critical）缺陷，涉及图形处理、渲染引擎及核心组件的安全隐患。官方安全公告显示，本次修复的漏洞大量集中在内存安全与内存腐蚀领域，包括缓冲区溢出（Buffer Overflow）、越界写入（Out-of ...

Software companies regularly publish security fixes, but a patch becoming public does not necessarily mean users are protected immediately. The time between revealing a code change and distributing ...

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension.

The KREMLIN malware has been targeting users since mid-2025, using fake financial documents to infect systems and forcibly install malicious Chrome and Edge extensions. The extensions can steal ...

Chrome 153 fixes 16 vulnerabilities across Windows, macOS, and Linux, including two critical Dawn and WebGL flaws.

Thirteen npm packages deliver WeaselBiscuit, a JavaScript stealer that harvests Chrome extension storage across Windows, macOS, and Linux.

Forever Security 研究员 Gal Weizman 公布了名为 BragJack 的浏览器 AI 助手攻击研究——用一个普通浏览器扩展,先后攻陷 Chrome、Microsoft Edge、Opera Neon、Perplexity Comet、Claude in Chrome 五款主流产品的内置 AI 助手,全程零点击、零传统意义上的提示注入。 我们刚用一个全新方法黑了五款全球最流 ...