Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

AI for Mathematics
AI Agents
LLM API Pricing
Foldable Phones
AI Agent Security
Open-Weight Model Publishing
Path Traversal
AI Lab IPOs
Water Utility Security
Chain-of-Thought Monitoring

How this is made

Today For You My Stack Off Radar Search

Fileless Browser Execution — Clarity Today

Topic

Fileless Browser Execution

Running attacker-supplied code entirely in browser memory, for example by injecting script into the DOM, so nothing is written to disk for endpoint tooling to inspect.

Current clusters

security1 distinct publisher

5,400 hacked WordPress and PrestaShop sites pull their ClickFix payload from a BNB testnet contract

The contract cannot be deleted. Every injected site has to reach a public BNB Smart Chain testnet RPC endpoint to read it. Netskope recommends blocking that pool. The payload has already changed once.

Publishers:bleepingcomputer.com

Reality

Evidence52
Adoption64
Hype gap+14
Incentives58

Confidence55