Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.
Microsoft has updated Copilot on Windows to open web links in an in-app side pane, bypassing users' default browser settings without offering an opt-out.