What Happened
Google has inadvertently exposed details about an unfixed issue in Chromium that could allow remote code execution on devices. The flaw, reported by security researcher Lyra Rebane in December 2022, keeps JavaScript running in the background even when the browser is closed. An attacker could exploit this problem to create a malicious webpage that never terminates, potentially leading to distributed denial-of-service (DDoS) attacks, proxying malicious traffic, and arbitrarily redirecting traffic to target sites.
Meanwhile, Apple revealed that it blocked over $11 billion in fraudulent App Store transactions over the last six years, with more than $2.2 billion blocked in 2025 alone. The tech giant also rejected over 2 million problematic app submissions last year and blocked more than 1.1 billion fraudulent account creations.
Why It Matters
The increasing sophistication of cyber threats, including the rise of AI-powered attacks and crypto drainers, has significant implications for individuals and organizations. As AI agents become more prevalent, their security and governance require more attention, shifting identity security budget dynamics. Moreover, the evolution of crypto theft operations into structured underground service economies poses a substantial risk to cryptocurrency users.
What Experts Say
"It's realistic to get tens of thousands of pageviews for creating a 'botnet', and people won't be aware that JavaScript can be remotely executed on their device." — Lyra Rebane, Security Researcher
Background
The recent wave of cyber threats highlights the need for increased vigilance and security measures. As technology advances, so do the tactics and strategies employed by cyber attackers. The use of AI and machine learning in cyber attacks has become more prevalent, making it essential for organizations and individuals to stay informed and adapt their security protocols.
What Comes Next
As the cyber threat landscape continues to evolve, it is crucial for individuals and organizations to prioritize security and stay informed about the latest threats. This includes staying up-to-date with the latest security patches, using strong passwords, and being cautious when interacting with unknown websites or apps.
What Happened
Google has inadvertently exposed details about an unfixed issue in Chromium that could allow remote code execution on devices. The flaw, reported by security researcher Lyra Rebane in December 2022, keeps JavaScript running in the background even when the browser is closed. An attacker could exploit this problem to create a malicious webpage that never terminates, potentially leading to distributed denial-of-service (DDoS) attacks, proxying malicious traffic, and arbitrarily redirecting traffic to target sites.
Meanwhile, Apple revealed that it blocked over $11 billion in fraudulent App Store transactions over the last six years, with more than $2.2 billion blocked in 2025 alone. The tech giant also rejected over 2 million problematic app submissions last year and blocked more than 1.1 billion fraudulent account creations.
Why It Matters
The increasing sophistication of cyber threats, including the rise of AI-powered attacks and crypto drainers, has significant implications for individuals and organizations. As AI agents become more prevalent, their security and governance require more attention, shifting identity security budget dynamics. Moreover, the evolution of crypto theft operations into structured underground service economies poses a substantial risk to cryptocurrency users.
What Experts Say
"It's realistic to get tens of thousands of pageviews for creating a 'botnet', and people won't be aware that JavaScript can be remotely executed on their device." — Lyra Rebane, Security Researcher
Background
The recent wave of cyber threats highlights the need for increased vigilance and security measures. As technology advances, so do the tactics and strategies employed by cyber attackers. The use of AI and machine learning in cyber attacks has become more prevalent, making it essential for organizations and individuals to stay informed and adapt their security protocols.
What Comes Next
As the cyber threat landscape continues to evolve, it is crucial for individuals and organizations to prioritize security and stay informed about the latest threats. This includes staying up-to-date with the latest security patches, using strong passwords, and being cautious when interacting with unknown websites or apps.