Search: “JavaScript downloaders”

86 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1007 Vulnerability 335 Ransomware 192 Threat actor 144 Exploit / PoC 133 Phishing & fraud 72 Data breach 67 Advisory 18 Industry 18 Research 12 Policy & legal 10 AI tools & infra 6 AI safety & security 5 Tools 1

SeverityAll critical 412 high 1017 medium 520 low 55 info 16

Magecart Targets Emergency Services

The Hacker NewsJun 9, 07:07 UTC · Jun 9, 2020Vulnerability

Two more malicious Python packages in the PyPI

Kaspersky SecurelistAug 16, 12:13 UTC · Aug 16, 2022Vulnerability1

Cybercriminals increasingly focusing on credential theft

Help Net SecurityJun 26, 21:21 UTC · Jun 26, 2018Vulnerability

How to Exploit Belkin WEMO gear to hack Android devices

Security AffairsNov 6, 14:38 UTC · Nov 6, 2016Vulnerability

Information Security Threats in the First Quarter of 2010

Kaspersky SecurelistJun 1, 14:45 UTC · Jun 1, 2010Vulnerability CVE-2010-0249

‘Locked Out’

Kaspersky SecurelistMar 12, 11:00 UTC · Mar 12, 2015Vulnerability

North Korean hackers behind major open

The RecordJul 30, 13:04 UTC · Jul 30, 2026Vulnerability

Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions

The Hacker NewsJun 2, 10:08 UTC · Jun 2, 2025Vulnerability CVE-2017-11882

Duo Labs presents CRXcavator Service that analyzes Chrome Extensions

Security AffairsFeb 24, 13:33 UTC · Feb 24, 2019Vulnerability

More fakeAV for MAC. This time it’s massive

Kaspersky SecurelistMay 12, 17:37 UTC · May 12, 2011Vulnerability CVE-2010-1885

Malicious npm packages caught stealing Discord tokens, environment variables

The RecordDec 21, 00:00 UTC · Dec 21, 2022Vulnerability

BT Wi-Fi extenders, extends to XSS and password changing vulnerabilities

Security AffairsSep 22, 19:33 UTC · Sep 22, 2016Vulnerability

WordPress Download Manager Plugin was affected by two flaws

Security AffairsAug 2, 06:54 UTC · Aug 2, 2021Vulnerability CVE-2021-34639 CVE-2021-34638

Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information

The Hacker NewsOct 31, 10:12 UTC · Oct 31, 2024Vulnerability

Ireland Proposes Giving Police New Digital Surveillance Powers

Schneier on SecurityJan 26, 12:04 UTC · Jan 26, 2026Vulnerability

Telegram Desktop Flaw Lets Attackers Steal Chat Messages Through Poisoned HTML Exports

Telegram Desktop XSS in bot inline keyboard buttons let attackers steal chat content from exported HTML archives; patched in 7.0.1.

ExPatch researchers Denis and Aleksander Rostilov found a stored cross-site scripting flaw in Telegram Desktop's HTML export feature, present since version 4.15.1 (March 2024). JavaScript hidden in bot inline keyboard button text executes when a user opens an exported chat HTML file with JavaScript enabled, exposing messages, metadata, and enabling DOM manipulation such as fake verification screens. Fixes shipped in Desktop Beta 6.9.4 (July 3, 2026) and Stable 7.0.1 (July 14, 2026), but previously exported HTML files remain unsafe.