A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.

A critical vulnerability in the Node.js sandboxing library, isolated-vm, has exposed a serious risk to AI agents, automation ...

Fake Adobe Acrobat sites are hiding malware-as-a-service panels, using document lures to target Windows users with harmful ...

Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

Google has rolled out a new Stable channel update for Chrome Desktop, bumping the browser to version 151.0.7922.173/.174 for ...

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

Cloudflare Workers Spectre attack research published August 19, 2026 showed JWT token theft at 12 bits per second in live ...

The criminal AI service uses jailbreaks to bypass safeguards on legitimate AI models and offers capabilities including ...

Chrome security update 151.0.7922.169/.170 patches 15 vulnerabilities, including two Critical sandbox-escape buffer overflows ...

ThreatDown, the business security arm of Malwarebytes Inc., said in new research published today that Kriminal, one of the ...