Threat intelBrief2 min read
Researchers say the group planted malicious code on legitimate sites and a Ukrainian analytics service, then used known vulnerabilities to pull data from vulnerable phones.
Threat intelExploitedCVE-2025-43529CVSS 8.82 min read
Sekoia attributes a large-scale watering hole operation to APT29 with moderate-to-high confidence. The payloads chained already-patched browser and OS flaws, and none of them established persistence.
IncidentsBrief2 min read
The settlement, pending bankruptcy court approval, resolves allegations the company failed to protect customer data before a breach that exposed information on nearly 7 million people.
VulnerabilitiesBrief2 min read
Google promoted Chrome 156 to the stable channel with patches for 353 vulnerabilities, including six rated critical, and said none were known to be exploited in the wild.
VulnerabilitiesBrief2 min read
Chrome now flags lower-confidence "suspicious" sites, scrubs copied commands for analysis, and asks before connecting over unencrypted HTTP.
VulnerabilitiesBrief1 min read
Mozilla and Google's Chrome Root Program confirmed the compromise of private keys for eight eMudhra intermediate CA certificates, a failure that could let a key holder mint trusted certificates for any site.
