Search: “javascript”

459 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 2064 Vulnerability 1230 Exploit / PoC 533 Ransomware 333 Threat actor 297 Data breach 242 Phishing & fraud 211 Industry 68 Policy & legal 56 Research 38 Advisory 36 AI tools & infra 32 AI safety & security 17 AI research 7

SeverityAll critical 1289 high 2518 medium 1077 low 227 info 63

Why React Didn't Kill XSS: The New JavaScript Injection Playbook

The Hacker NewsJul 29, 10:00 UTC · Jul 29, 2025Vulnerability

55

ShiftLeft's features identify attackable JavaScript and TypeScript vulnerabilities

Help Net SecurityDec 17, 00:00 UTC · Dec 17, 2021Vulnerability

55

Avast disables the JavaScript engine component due to a severe issue

Security AffairsMar 11, 23:26 UTC · Mar 11, 2020Vulnerability

55

Adobe fixes flaws in Adobe InDesign,Framemaker, Experience Manager

Security AffairsSep 8, 20:43 UTC · Sep 8, 2020Vulnerability CVE-2020-9727 CVE-2020-9728 CVE-2020-9729+15 CVEs

60

Why Unmonitored JavaScript Is Your Biggest Holiday Security Risk

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Vulnerability

55

Firefox Blocks Inline and Eval JavaScript on Internal Pages to Prevent Injection Attacks

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2019Vulnerability

55

Microsoft Patch Tuesday

Cisco TalosJun 13, 20:48 UTC · Jun 13, 2017Vulnerability CVE-2017-0283 CVE-2017-0291 CVE-2017-0292+37 CVEs

60

OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt

The Hacker NewsApr 17, 05:00 UTC · Apr 17, 2024Vulnerability

55

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

The Hacker NewsJun 26, 07:33 UTC · Jun 26, 2026Vulnerability CVE-2026-26980

60

CERT/CC Warns binary-parser Bug Allows Node.js Privilege

The Hacker NewsJan 27, 14:10 UTC · Jan 27, 2026Vulnerability CVE-2026-1245

60

5 Threats That Reshaped Web Security This Year [2025]

The Hacker NewsDec 4, 11:30 UTC · Dec 4, 2025Vulnerability CVE-2025-54135 CVE-2025-53109 CVE-2025-55284

60

Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

The Hacker NewsJun 28, 04:05 UTC · Jun 28, 2024Vulnerability CVE-2024-34102 CVE-2024-2961

60

Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

The Hacker NewsApr 20, 04:45 UTC · Apr 20, 2023Vulnerability CVE-2023-29199 CVE-2023-30547 CVE-2023-29017+1 CVEs

60

Researchers Detail Critical RCE Flaw Reported in Popular vm2 JavaScript Sandbox

The Hacker NewsOct 11, 11:28 UTC · Oct 11, 2022Vulnerability CVE-2022-36067

60

US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

Security AffairsJul 24, 08:31 UTC · Jul 24, 2026Vulnerability in the wildCVE-2025-66376

60

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

The Hacker NewsMay 26, 15:12 UTC · May 26, 2025Vulnerability

55

Adobe fixes critical flaws in Flash Player and Framemaker

Security AffairsJun 9, 17:59 UTC · Jun 9, 2020Vulnerability CVE-2020-9633 CVE-2020-9643 CVE-2020-9647+5 CVEs

60

Tracing Spam from E-mail Headers

Schneier on SecurityJan 27, 14:18 UTC · Jan 27, 2020Vulnerability

55

Cisco Talos discloses serious vulnerabilities in Foxit PDF Reader

Help Net SecurityOct 2, 00:00 UTC · Oct 2, 2018Vulnerability

55

vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution

The Hacker NewsMay 11, 03:55 UTC · May 11, 2026Vulnerability CVE-2026-24118 CVE-2026-24120 CVE-2023-37466+11 CVEs

60

Mass PolyShell attack wave hits 471 stores in one hour

Sansec (Magento / e-commerce security)Mar 31, 07:45 UTC · Mar 31, 2026Vulnerability in the wildCVE-2026-75650

60

Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas

The Hacker NewsJan 27, 14:07 UTC · Jan 27, 2026Vulnerability CVE-2026-24002 CVE-2025-68668

60

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

The Hacker NewsDec 10, 09:13 UTC · Dec 10, 2025Vulnerability CVE-2025-59718 CVE-2025-59719 CVE-2025-10573+6 CVEs

60

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Vulnerability CVE-2024-50050 CVE-2025-30165 CVE-2025-23254+1 CVEs

60

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

Apple chips can be hacked to leak secrets from Gmail, iCloud, and more

Ars Technica · SecurityJan 28, 20:56 UTC · Jan 28, 2025Vulnerability

55

Operation Triangulation: The last (hardware) mystery

Kaspersky SecurelistDec 27, 14:00 UTC · Dec 27, 2023Vulnerability in the wildCVE-2023-41990 CVE-2023-32434 CVE-2023-38606+1 CVEs1

60

F5 warns its customers of tens of flaws in its products

Security AffairsMay 5, 09:47 UTC · May 5, 2022Vulnerability CVE-2022-1388 CVE-2022-25946 CVE-2022-27806+1 CVEs

60

Moodle vulnerability exposed users to account takeover

Security AffairsApr 8, 20:22 UTC · Apr 8, 2021Vulnerability

55

Mozilla offers rewards for Bypassing Firefox Exploit Mitigations

Security AffairsAug 21, 15:55 UTC · Aug 21, 2020Vulnerability

55

Microsoft Patch Tuesday

Cisco TalosAug 8, 18:30 UTC · Aug 8, 2017Vulnerability CVE-2017-8653 CVE-2017-8669 CVE-2017-8661+38 CVEs

60

Critical DOM XSS flaw on Wix.com put million websites at risk

Security AffairsNov 3, 10:44 UTC · Nov 3, 2016Vulnerability

55

Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026

Security AffairsJul 21, 06:08 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-6875

60

Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025

Security AffairsMar 19, 14:48 UTC · Mar 19, 2026Vulnerability in the wildCVE-2025-66376

60

Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs

The Hacker NewsFeb 18, 13:16 UTC · Feb 18, 2026Vulnerability CVE-2025-65717 CVE-2025-65716 CVE-2025-657151

60

ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories

The Hacker NewsFeb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild1

60

Critical and High Severity n8n Sandbox Flaws Allow RCE

Infosecurity MagazineJan 28, 16:00 UTC · Jan 28, 2026Vulnerability CVE-2026-1470 CVE-2026-0863

60

CVE-2025-10585 is the sixth actively exploited Chrome zero

Security AffairsNov 18, 08:52 UTC · Nov 18, 2025Vulnerability in the wildCVE-2025-10585 CVE-2025-5419 CVE-2025-4664+3 CVEs

60

ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Vulnerability

55

iframe Security Exposed: The Blind Spot Fueling Payment Skimmer Attacks

The Hacker NewsSep 24, 11:03 UTC · Sep 24, 2025Vulnerability in the wild

60