Search: “JavaScript downloaders”

112 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1007 Vulnerability 335 Ransomware 192 Threat actor 144 Exploit / PoC 133 Phishing & fraud 72 Data breach 67 Advisory 18 Industry 18 Research 12 Policy & legal 10 AI tools & infra 6 AI safety & security 5 Tools 1

SeverityAll critical 412 high 1017 medium 520 low 55 info 16

Sonatype Reports 156% Increase in OSS Malicious Packages

Infosecurity MagazineOct 11, 11:00 UTC · Oct 11, 2024Vulnerability

55

⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More

The Hacker NewsMay 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-31431 CVE-2026-3854+2 CVEs

60

Week in review: Spring4Shell vulnerability, attackers exploiting patched RCE in Sophos Firewall

Help Net SecurityApr 3, 00:00 UTC · Apr 3, 2022Vulnerability in the wildCVE-2022-1040

60

CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog

The Hacker NewsMar 1, 04:37 UTC · Mar 1, 2022Vulnerability in the wildCVE-2022-24682 CVE-2017-8570 CVE-2017-0222+1 CVEs

60

Avast disables the JavaScript engine component due to a severe issue

Security AffairsMar 11, 23:26 UTC · Mar 11, 2020Vulnerability

55

Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)

Help Net SecurityOct 22, 00:00 UTC · Oct 22, 2024Vulnerability CVE-2024-37383

60

Software Supply Chain Attacks Surge 650% in a Year

Infosecurity MagazineSep 15, 14:00 UTC · Sep 15, 2021Vulnerability

55

5 Threats That Reshaped Web Security This Year [2025]

The Hacker NewsDec 4, 11:30 UTC · Dec 4, 2025Vulnerability CVE-2025-54135 CVE-2025-53109 CVE-2025-55284

60

Fear, uncertainty and the padding oracle exploit in ASP.NET

Troy HuntSep 18, 23:00 UTC · Sep 18, 2010Vulnerability

55

Unpatched CCTV Cameras Exploited to Spread Mirai Variant

Infosecurity MagazineAug 29, 15:00 UTC · Aug 29, 2024Vulnerability in the wildCVE-2024-7029 CVE-2014-8361 CVE-2017-17215

60

Rocke: The Champion of Monero Miners

Cisco TalosAug 30, 15:26 UTC · Aug 30, 2018Vulnerability CVE-2017-10271 CVE-2017-3066

60

When transparency is also obscurity: The conundrum that is open-source security

Help Net SecurityOct 4, 00:00 UTC · Oct 4, 2022Vulnerability

55

ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories

The Hacker NewsJan 24, 08:04 UTC · Jan 24, 2026Vulnerability

55

Critical vm2 sandbox escape flaw uncovered, patch ASAP! (CVE-2022-36067)

Help Net SecurityApr 24, 13:36 UTC · Apr 24, 2023Vulnerability CVE-2022-36067

60

Unofficial Patch Released for New Actively Exploited Windows MotW Vulnerability

The Hacker NewsNov 1, 11:03 UTC · Nov 1, 2022Vulnerability in the wild

60

Google white hackers disclosed critical vulnerabilities in uTorrent clients

Security AffairsFeb 22, 07:45 UTC · Feb 22, 2018Vulnerability

55

Flaws in Popular IDE Extensions Allow Data Exfiltration

Infosecurity MagazineFeb 19, 10:45 UTC · Feb 19, 2026Vulnerability CVE-2025-65717 CVE-2025-65716 CVE-2025-65715

60

Critical Bug Reported in NPM Package With Millions of Downloads Weekly

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2021Vulnerability CVE-2021-23406

60

Spam report: June 2010

Kaspersky SecurelistJul 21, 17:08 UTC · Jul 21, 2010Vulnerability in the wild

60

Avoiding Death by a Thousand Scripts: Using Automated Content Security Policies

The Hacker NewsJul 12, 11:28 UTC · Jul 12, 2022Vulnerability

55

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

The Hacker NewsJun 26, 07:33 UTC · Jun 26, 2026Vulnerability CVE-2026-26980

60

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

The Hacker NewsMay 26, 15:12 UTC · May 26, 2025Vulnerability

55

Popular NPM package Pac

Security AffairsSep 14, 04:33 UTC · Sep 14, 2021Vulnerability CVE-2021-23406

60

Unpatched Flaw in Linux Pling Store Apps Could Lead to Supply

The Hacker NewsJun 23, 04:01 UTC · Jun 23, 2021Vulnerability

55

CERT/CC Warns binary-parser Bug Allows Node.js Privilege

The Hacker NewsJan 27, 14:10 UTC · Jan 27, 2026Vulnerability CVE-2026-1245

60

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-419401

60

ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ Stories

The Hacker NewsFeb 23, 10:23 UTC · Feb 23, 2026Vulnerability

55

New Exploit Targeting Java Vulnerability Found in BlackHole Arsenal

Kaspersky SecurelistDec 13, 13:48 UTC · Dec 13, 2011Vulnerability CVE-2011-3544 CVE-2010-0188

60

December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2022Vulnerability in the wildCVE-2022-44698 CVE-2022-41091 CVE-2022-44710+4 CVEs

60

Critical React Native CLI Flaw Exposed Millions of Developers to Remote Attacks

The Hacker NewsNov 4, 14:24 UTC · Nov 4, 2025Vulnerability CVE-2025-11953

60

2017 Vulnerability Report: A Shift in Cybercriminal Preferences

Recorded FutureAug 11, 00:00 UTC · Aug 11, 2025Vulnerability CVE-2016-0189 CVE-2015-7645 CVE-2015-2444

60

New Kit, Same Player: Top 10 Vulnerabilities Used by Exploit Kits in 2016

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability CVE-2015-2419 CVE-2015-1671 CVE-2015-0313+2 CVEs

60

9 vulnerabilities found in VPN software, including 1 critical issue that could lead to remote code execution

Cisco TalosOct 25, 16:00 UTC · Oct 25, 2023Vulnerability CVE-2023-22325 CVE-2023-23581 CVE-2023-22308+16 CVEs

60

MS06

Kaspersky SecurelistAug 25, 12:17 UTC · Aug 25, 2006Vulnerability

55

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Vulnerability CVE-2024-50050 CVE-2025-30165 CVE-2025-23254+1 CVEs

60

VS Code extensions with 125M+ installs expose users to cyberattacks

Security AffairsFeb 18, 15:14 UTC · Feb 18, 2026Vulnerability CVE-2025-65715 CVE-2025-65716 CVE-2025-657171

60

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

The Hacker NewsDec 9, 05:09 UTC · Dec 9, 2023Vulnerability in the wildCVE-2023-26360

60

node-ipc NPM Package sabotage to protest Ukraine invasion

Security AffairsMar 18, 00:16 UTC · Mar 18, 2022Vulnerability CVE-2022-23812

60

Microsoft releases patch for .wmf vulnerability

Kaspersky SecurelistJan 6, 13:27 UTC · Jan 6, 2006Vulnerability

55

Firefox Blocks Inline and Eval JavaScript on Internal Pages to Prevent Injection Attacks

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2019Vulnerability

55