Search: “javascript”

297 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 2067 Vulnerability 1230 Exploit / PoC 534 Ransomware 333 Threat actor 299 Data breach 242 Phishing & fraud 213 Industry 68 Policy & legal 56 Research 38 Advisory 36 AI tools & infra 33 AI safety & security 17 AI research 7

SeverityAll critical 1289 high 2521 medium 1082 low 227 info 64

Hospitality Sector Hit by Phishing Campaign Using Fake Guest Complaint Emails

Security AffairsJun 28, 15:07 UTC · Jun 28, 2026Threat actor1

57

Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploited

Help Net SecurityJun 28, 00:00 UTC · Jun 28, 2026Threat actor in the wildCVE-2026-20230

60

Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant

The Hacker NewsJun 26, 09:27 UTC · Jun 26, 2026Threat actor

57

Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaigns

Help Net SecurityJun 19, 12:07 UTC · Jun 19, 2026Threat actor

60

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

The Hacker NewsMay 30, 06:13 UTC · May 30, 2026Threat actor1

57

Chinese Threat Actors Shift to Live Credential Interception

Infosecurity MagazineMay 26, 14:45 UTC · May 26, 2026Threat actor

45

How to spot a suspicious website

Kaspersky SecurelistMay 6, 13:30 UTC · May 6, 2026Threat actor

60

Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud

The Hacker NewsApr 30, 06:30 UTC · Apr 30, 2026Threat actor

45

Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles

The Hacker NewsApr 22, 07:58 UTC · Apr 22, 2026Threat actor

57

Attackers exploit Twilio's misconfigured cloud storage, inject malicious code into SDK

Help Net SecurityApr 20, 09:45 UTC · Apr 20, 2026Threat actor

45

Thousands of Adobe Commerce stores hacked in competing CosmicSting campaigns

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Threat actor CVE-2024-34102

60

Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials

The Hacker NewsMar 25, 07:01 UTC · Mar 25, 2026Threat actor

45

First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Threat actor

57

Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Threat actor

45

North Korean PurpleBravo Campaign Targeted 3,136 IP Addresses via Fake Job Interviews

The Hacker NewsJan 21, 17:17 UTC · Jan 21, 2026Threat actor

57

Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations

The Hacker NewsJan 12, 08:28 UTC · Jan 12, 2026Threat actor

45

DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide

The Hacker NewsJan 1, 09:11 UTC · Jan 1, 2026Threat actor

45

Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites

The Hacker NewsDec 30, 07:57 UTC · Dec 30, 2025Threat actor

57

ShadyPanda's 7-Year Campaign Infects 4.3M Chrome and Edge Users

Infosecurity MagazineDec 2, 15:10 UTC · Dec 2, 2025Threat actor

57

⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

The Hacker NewsNov 3, 17:59 UTC · Nov 3, 2025Threat actor CVE-2025-61932 CVE-2025-55315 CVE-2025-10680+18 CVEs1

60

BlueNoroff's latest campaigns: GhostCall and GhostHire

Kaspersky SecurelistOct 28, 03:00 UTC · Oct 28, 2025Threat actor

45

AI-Generated Code Used in Phishing Campaign Blocked by Microsoft

Infosecurity MagazineSep 29, 16:45 UTC · Sep 29, 2025Threat actor1

45

FileFix Campaign Using Steganography and Multistage Payloads

Infosecurity MagazineSep 17, 16:45 UTC · Sep 17, 2025Threat actor in the wild

60

A new RevengeHotels campaign targets Latin America

Kaspersky SecurelistSep 16, 10:00 UTC · Sep 16, 2025Threat actor CVE-2017-0199

50

GhostAction Supply Chain Attack Compromises 3000+ Secrets

Infosecurity MagazineSep 8, 11:00 UTC · Sep 8, 2025Threat actor

57

Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group

The RecordSep 3, 00:03 UTC · Sep 3, 2025Threat actor1

45

Amazon Stops Russian APT29 Watering Hole Attack

Infosecurity MagazineSep 1, 11:00 UTC · Sep 1, 2025Threat actor

60

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

The Hacker NewsAug 30, 04:26 UTC · Aug 30, 2025Threat actor

45

Phishing Campaign Uses UpCrypter to Deploy Remote Access Tools

Infosecurity MagazineAug 26, 16:00 UTC · Aug 26, 2025Threat actor

45

North Korea's Late 2017 Campaign Targeted South Korean Cryptocurrency Users

Recorded FutureAug 23, 00:00 UTC · Aug 23, 2025Threat actor CVE-2017-8291 CVE-2015-6585

60

Chinese State-Sponsored Group TA413 Adopts New Capabilities in Pursuit of Tibetan Targets

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Threat actor CVE-2022-1040 CVE-2022-30190

60

PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain

The Hacker NewsJul 31, 10:03 UTC · Jul 31, 2025Threat actor

45

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

The Hacker NewsJul 22, 07:17 UTC · Jul 22, 2025Threat actor

45

China-Linked Hackers Launch Targeted Espionage Campaign on African IT Infrastructure

The Hacker NewsJul 21, 17:09 UTC · Jul 21, 2025Threat actor

57

North Korean Actors Expand Contagious Interview Campaign with New Malw

Infosecurity MagazineJul 15, 12:30 UTC · Jul 15, 2025Threat actor

57

Widespread Campaign Targets Cybercriminals and Gamers

Infosecurity MagazineJun 4, 13:30 UTC · Jun 4, 2025Threat actor

57

Large-Scale Phishing Campaigns Target Russia and Ukraine

Infosecurity MagazineMay 1, 16:00 UTC · May 1, 2025Threat actor

57

State-of-the

Cisco TalosMay 1, 10:00 UTC · May 1, 2025Threat actor

45

I Went to See ‘God’s Influencer,’ the Millennial Saint Carlo Acutis

404 MediaApr 16, 12:40 UTC · Apr 16, 2025Threat actor

60

Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign

The Hacker NewsApr 8, 03:53 UTC · Apr 8, 2025Threat actor

45