A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users’ Twitch OAuth session tokens to a […]
A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect […]
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS […]
Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access […]
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history […]
An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, the […]
Cybersecurity researchers have discovered a network of 152 Google Chrome extensions that act as new tab live wallpaper add-ons to distribute a potentially unwanted program […]
Cybercriminals compromised the update mechanism for the Smart Slider 3 Pro plugin used on WordPress and Joomla, spreading a tainted version containing multiple secret entry […]
On Thursday, Google introduced a new “advanced method” for sideloading Android apps. To balance accessibility and security, installing apps from unverified developers will now require […]
Researchers have identified a malicious Go module, github.com, designed to harvest passwords and deploy the Rekoobe backdoor. Disclosed on February 27, 2026, the module impersonates the legitimate golang.org/x/crypto library to […]
© Bulletproof Servers. All rights reserved.