The extension has since been updated to remove the OAuth exfil.
A 10/10 GitLab flaw was added to CISA’s KEV, giving government agencies just three days to patch.
Passkeys have all but eliminated password theft, so what now? Criminals have a solution.

A viral voice scam shows that even if you recognize the voice of a friend or loved one, that’s no guarantee that it’s really them.

AI companies want to slow down development, but that doesn’t fly with Trump and China – so what do the experts think?
Revolut is now being asked to pay a humongous ransom demand to keep the data private.
Your “digital Frankenstein” can pass KYC and you can get it for $200 on Telegram

A £3 Temu Wi-Fi extender contained hidden administrator access, shared credentials, remote login capabilities, command injection, and weak update protection.
Banks need to get better at reporting issues, so the US Treasury has shared a list of red flags and explained how the scams usually go.
Unique malware variant spotted targeting Android users, taking photos with victim cameras before deploying an encryptor.