The Hacker News

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
Tech Times

Microsoft Pulls 119 Malicious Edge Extensions Hiding Malware in Images

StegoAd Microsoft Edge extensions malware affected up to 2.6 million users after the company removed 119 add-ons that hid ...

CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution ...
Windows Report

CISA Warns Microsoft SharePoint Flaw Is Actively Exploited

CISA added a Microsoft SharePoint RCE flaw to its exploited bugs catalog after confirming active attacks on unpatched servers ...
SecurityWeek

CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability

CISA warns that attackers are exploiting Microsoft SharePoint vulnerability CVE-2026-45659, a high-severity remote code ...
Tech Times

Fake Perplexity Chrome Extension: How One Permission Combo Logged Every Keystroke

Fake Perplexity Chrome extension exploited a legal permission combination to log every address-bar keystroke before ...

Microsoft takes down over 100 malicious Edge extensions hiding malware in images and fonts

Microsoft says these 119 malicious extensions were downloaded a total of 2.6 million times since 2021.