3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket TacticsThe Hacker News·Jul 21, 06:29 UTC · Jul 21, 2025Data breach57
CosmicSting attack & defense overviewSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Data breach in the wildCVE-2024-2961CVE-2024-3410260
Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login TokensThe Hacker News·Dec 22, 16:28 UTC · Dec 22, 2025Data breach57
NPM package with 56,000 downloads compromises WhatsApp accountsSecurity Affairs·Dec 27, 09:40 UTC · Dec 27, 2025Data breach57
Found: 280 Android apps that use OCR to steal cryptocurrency credentialsArs Technica · Security·Sep 6, 20:23 UTC · Sep 6, 2024Data breach45
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session TheftThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Data breach45
Novel WebRTC skimmer bypasses security controls at $100+ billion car makerSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Data breach in the wild60
CERT-UA reports PLUGGYAPE cyberattacks on defense forcesSecurity Affairs·Jan 14, 19:24 UTC · Jan 14, 2026Data breach57
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & MoreThe Hacker News·Oct 20, 19:00 UTC · Oct 20, 2025Data breachCVE-2025-20352CVE-2025-48561CVE-2025-24990+18 CVEs60
Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to HackersThe Hacker News·May 27, 11:37 UTC · May 27, 2025Data breach45
Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting ExploitThe Hacker News·Oct 2, 12:13 UTC · Oct 2, 2024Data breach in the wildCVE-2024-34102CVE-2024-296160
Take a walk on the client side: The importance of front-end JavaScript security assessmentsHelp Net Security·Mar 9, 20:14 UTC · Mar 9, 2023Data breach60
Friday Squid Blogging: Studying the Colossal SquidSchneier on Security·Feb 3, 22:02 UTC · Feb 3, 2023Data breach57