Security researchers have identified a JavaScript ... notification messages that appear completely normal to unsuspecting users. And, further investigation shows this could be parlayed into remote ...