CNCERT warns OpenClaw AI agent has weak defaults enabling prompt injection and data leaks, prompting China to restrict use on government systems.
Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.
Google has confirmed an emergency Chrome security update amid reports that attackers are exploiting two zero-day vulnerabilities.
The technique exploits Unicode Private Use Area characters, which render as zero-width whitespace in virtually every code editor and terminal.