Search: “javascript”

1,169 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 443 Vulnerability 348 Ransomware 126 Data breach 87 Threat actor 79 Malware 74 Phishing & fraud 12 Advisory 8 Policy & legal 3 Model release 1 AI safety & security 1 AI industry 1 AI research 1 Research 1

SeverityAll critical 973 high 198 medium 10 low 0 info 4

vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution

The Hacker NewsMay 11, 03:55 UTC · May 11, 2026Vulnerability CVE-2026-24118 CVE-2026-24120 CVE-2023-37466+11 CVEs

60

CosmicSting attack & defense overview

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Data breach in the wildCVE-2024-2961 CVE-2024-34102

60

Adobe fixes actively exploited Acrobat Reader flaw CVE-2026

Security AffairsApr 12, 17:47 UTC · Apr 12, 2026Data breach in the wildCVE-2026-34621

60

Mass PolyShell attack wave hits 471 stores in one hour

Sansec (Magento / e-commerce security)Mar 31, 07:45 UTC · Mar 31, 2026Vulnerability in the wildCVE-2026-75650

60

Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge

Security AffairsMar 20, 11:22 UTC · Mar 20, 2026Exploit / PoC CVE-2021-30952 CVE-2022-48503 CVE-2023-43000+15 CVEs1

60

⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909 CVE-2026-3910 CVE-2026-3913+40 CVEs2

60

Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas

The Hacker NewsJan 27, 14:07 UTC · Jan 27, 2026Vulnerability CVE-2026-24002 CVE-2025-68668

60

Google fixed a new actively exploited Chrome zero

Security AffairsDec 11, 18:19 UTC · Dec 11, 2025Exploit / PoC in the wildCVE-2025-14372 CVE-2025-14373 CVE-2025-6554+6 CVEs

60

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

The Hacker NewsDec 10, 09:13 UTC · Dec 10, 2025Vulnerability CVE-2025-59718 CVE-2025-59719 CVE-2025-10573+6 CVEs

60

APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains

The Hacker NewsNov 22, 06:13 UTC · Nov 22, 2025Threat actor CVE-2012-0158 CVE-2014-1761 CVE-2025-8088

60

Google fixed the seventh Chrome zero

Security AffairsNov 18, 08:59 UTC · Nov 18, 2025Exploit / PoC in the wildCVE-2025-13223 CVE-2025-13224 CVE-2025-10585+5 CVEs

60

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Vulnerability CVE-2024-50050 CVE-2025-30165 CVE-2025-23254+1 CVEs

60

When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider

The Hacker NewsSep 1, 11:55 UTC · Sep 1, 2025Ransomware

60

Russian Espionage Operation Targets Organizations Tied to Ukraine War

Infosecurity MagazineMay 16, 11:15 UTC · May 16, 2025Threat actor CVE-2024-11182 CVE-2023-43770

60

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware in the wildCVE-2024-57726 CVE-2024-57727 CVE-2024-57728+18 CVEs

60

Case Study: Are CSRF Tokens Sufficient in Preventing CSRF Attacks?

The Hacker NewsApr 3, 10:49 UTC · Apr 3, 2025Data breach

60

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

The Hacker NewsDec 24, 05:50 UTC · Dec 24, 2024Malware in the wild1

60

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security AffairsOct 25, 07:40 UTC · Oct 25, 2024Exploit / PoC in the wildCVE-2024-20481 CVE-2024-37383

60

Google fixes seventh actively exploited Chrome zero

Security AffairsMay 16, 13:13 UTC · May 16, 2024Exploit / PoC in the wildCVE-2024-4947 CVE-2024-4671 CVE-2024-4761+7 CVEs1

60

Cybercriminal adoption of browser fingerprinting

Help Net SecurityApr 5, 00:00 UTC · Apr 5, 2024Threat actor

60

New iPhone Exploit Uses Four Zero-Days

Schneier on SecurityJan 4, 12:11 UTC · Jan 4, 2024Exploit / PoC CVE-2023-41990 CVE-2023-32434 CVE-2023-38606+1 CVEs

60

4-year campaign backdoored iPhones using possibly the most advanced exploit ever

Ars Technica · SecurityDec 27, 17:03 UTC · Dec 27, 2023Malware CVE-2023-32434 CVE-2023-32435 CVE-2023-38606+1 CVEs1

60

Operation Triangulation: The last (hardware) mystery

Kaspersky SecurelistDec 27, 14:00 UTC · Dec 27, 2023Vulnerability in the wildCVE-2023-41990 CVE-2023-32434 CVE-2023-38606+1 CVEs1

60

Apple news: iLeakage attack, MAC address leakage bug

Help Net SecurityOct 27, 00:00 UTC · Oct 27, 2023Exploit / PoC CVE-2023-32434 CVE-2023-42846

60

CISA adds Zimbra bug exploited in attacks against NATO countries to its Known Exploited Vulnerabilities catalog

Security AffairsApr 8, 22:11 UTC · Apr 8, 2023Exploit / PoC in the wildCVE-2022-27926

60

Google fixed the ninth actively exploited Chrome zeroday this year

Security AffairsDec 3, 15:24 UTC · Dec 3, 2022Exploit / PoC in the wildCVE-2022-4262 CVE-2022-4135 CVE-2022-3723+6 CVEs

60

IT threat evolution Q3 2022

Kaspersky SecurelistNov 18, 08:00 UTC · Nov 18, 2022Ransomware CVE-2017-10271

60

F5 warns its customers of tens of flaws in its products

Security AffairsMay 5, 09:47 UTC · May 5, 2022Vulnerability CVE-2022-1388 CVE-2022-25946 CVE-2022-27806+1 CVEs

60

How Just Visiting A Site Could Have Hacked Your iPhone or MacBook Camera

The Hacker NewsJan 31, 05:24 UTC · Jan 31, 2022Exploit / PoC CVE-2020-3852 CVE-2020-3864 CVE-2020-3865+4 CVEs

60

Tackling cross-site request forgery (CSRF) on company websites

Help Net SecurityMar 23, 00:00 UTC · Mar 23, 2021Exploit / PoC in the wild

60

Vulnerability Spotlight: Remote code execution vulnerabilities in Adobe Acrobat Reader

Cisco TalosMay 12, 17:00 UTC · May 12, 2020Vulnerability in the wildCVE-2020-9607 CVE-2020-9609

60

100k+ WordPress sites exposed to hack due to a bug in Real

Security AffairsApr 28, 09:03 UTC · Apr 28, 2020Exploit / PoC in the wild

60

Crooks are attempting to take over tens of thousands of WordPress sites

Security AffairsFeb 29, 16:15 UTC · Feb 29, 2020Exploit / PoC in the wild

60

Vulnerability Spotlight: Information leak vulnerability in Adobe Acrobat Reader

Cisco TalosDec 10, 19:48 UTC · Dec 10, 2019Vulnerability in the wildCVE-2019-16463

60

Vulnerability Spotlight: Google V8 Array.prototype memory corruption vulnerability

Cisco TalosJul 1, 13:57 UTC · Jul 1, 2019Vulnerability in the wildCVE-2019-5831

60

Magecart hackers change tactic and target vulnerable Magento extensions

Security AffairsOct 24, 20:55 UTC · Oct 24, 2018Exploit / PoC

60

Magecart strikes again, this time at electronics retailer Newegg

CyberScoopSep 19, 15:35 UTC · Sep 19, 2018Exploit / PoC in the wild

60

Arxan launches advanced protection for client-side web apps

Help Net SecuritySep 14, 00:00 UTC · Sep 14, 2018Data breach

60

Firefox 0-day exploited in the wild to unmask Tor users

Help Net SecurityJun 26, 21:24 UTC · Jun 26, 2018Exploit / PoC in the wild

60