As managing editor of PCMag's security team, it's my responsibility to ensure that our product advice is evidence-based, ...

A security researcher found that Microsoft Edge loads all saved passwords into unencrypted memory at startup, keeping them exposed for the entire session even when they are not in use.

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...