July 14, 2026
- Google and Microsoft pulled ModHeader (~1.6M installs) from Chrome and Edge after researchers found a hidden, dormant browsing-history collector in the official store build; an empty allow-list had kept it switched off with no evidence it ever fired. The Hacker News · Malware
in New PoC Spoofs Callstacks Around Intel CET to Blind Modern EDRs