ZZyVOP·Sep 14The Deathray: A Simple Way for an Untrusted Site to Freeze a MacA WebGPU bug lets any website hang a Mac's entire desktop with one click — and Apple says it's not a security issue.8 min read·blog.zyvop.com
ZZyVOP·Sep 7The Sandbox Held. The Headline Didn't.Inside CVE-2026-85046, Chrome's sixth zero-day of 2026 and third in V8 — and why 'sandbox RCE in all Chromium versions' oversells and undersells the real story15 min read·blog.zyvop.com
DDeepSeaX·Mar 3Fake Google Security Alert Installs PWA That Steals MFA CodesA phishing campaign uses google-prism.com to install a fake Google security PWA that steals MFA codes via WebOTP API, exfiltrates GPS and contacts, and acts as a browser RAT.4 min read·deepseax.hashnode.dev
DDeepSeaX·Mar 2CVE-2026-0628: Chrome Extensions Exploit Gemini Panel for Privilege EscalationCVE-2026-0628 lets malicious Chrome extensions hijack the Gemini AI panel to access cameras, files, and run arbitrary code. Patch now.3 min read·deepseax.hashnode.dev
FFrozzipies·Jun 1, 2025[Chromium VRP] Bypass :// Characters on Filename lead to File Origin SpoofingPada kesempatan kali ini saya akan membahas kerentanan yang agak berbeda, yaitu kerentanan browser spoofing. Kerentanan yang saya temukan ini terjadi ketika seorang attacker bisa memanipulasi origin atau source dari suatu file ketika di download. Con...3 min read·bountyproofs.com
