Search: “javascript”

1,286 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 2065 Vulnerability 1230 Exploit / PoC 533 Ransomware 333 Threat actor 299 Data breach 242 Phishing & fraud 213 Industry 68 Policy & legal 56 Research 38 Advisory 36 AI tools & infra 32 AI safety & security 17 AI research 7

SeverityAll critical 1289 high 2520 medium 1080 low 227 info 63

Palo Alto Networks Discovers Two Adobe Reader Privileged JavaScript Zero

Palo Alto Unit 42Jul 3, 01:11 UTC · Jul 3, 2020Exploit / PoC CVE-2016-6957 CVE-2016-6958

60

RiskIQ JavaScript Threats Module protects orgs' high-traffic payment pages from JavaScript attacks

Help Net SecurityAug 1, 00:00 UTC · Aug 1, 2019Data breach

60

Why React Didn't Kill XSS: The New JavaScript Injection Playbook

The Hacker NewsJul 29, 10:00 UTC · Jul 29, 2025Vulnerability

55

The Acrobat JavaScript Blocklist Framework

Cisco TalosJan 20, 17:56 UTC · Jan 20, 2010Exploit / PoC in the wildCVE-2008-2992 CVE-2009-0927 CVE-2009-1493+5 CVEs

60

Jscrambler launches Self-Healing JavaScript to prevent code tempering

Help Net SecurityJun 11, 00:00 UTC · Jun 11, 2019Industry

55

ShiftLeft's features identify attackable JavaScript and TypeScript vulnerabilities

Help Net SecurityDec 17, 00:00 UTC · Dec 17, 2021Vulnerability

55

Take a walk on the client side: The importance of front-end JavaScript security assessments

Help Net SecurityMar 9, 20:14 UTC · Mar 9, 2023Data breach

60

Avast disables the JavaScript engine component due to a severe issue

Security AffairsMar 11, 23:26 UTC · Mar 11, 2020Vulnerability

55

Adobe fixes flaws in Adobe InDesign,Framemaker, Experience Manager

Security AffairsSep 8, 20:43 UTC · Sep 8, 2020Vulnerability CVE-2020-9727 CVE-2020-9728 CVE-2020-9729+15 CVEs

60

Why Unmonitored JavaScript Is Your Biggest Holiday Security Risk

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Vulnerability

55

DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero

The Hacker NewsMar 23, 17:42 UTC · Mar 23, 2026Exploit / PoC CVE-2026-20700 CVE-2025-43529 CVE-2025-14174+3 CVEs

60

Lazarus APT steals cryptocurrency and user data via a decoy MOBA game

Kaspersky SecurelistOct 23, 11:00 UTC · Oct 23, 2024Threat actor CVE-2024-4947

60

Firefox Blocks Inline and Eval JavaScript on Internal Pages to Prevent Injection Attacks

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2019Vulnerability

55

JavaScript attack aimed to reroute bitcoin transactions

CyberScoopNov 7, 20:17 UTC · Nov 7, 2018Exploit / PoC in the wild

60

Zerodium Offers $1 Million for Tor Browser 0

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2017Exploit / PoC

60

Microsoft Patch Tuesday

Cisco TalosJun 13, 20:48 UTC · Jun 13, 2017Vulnerability CVE-2017-0283 CVE-2017-0291 CVE-2017-0292+37 CVEs

60

OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt

The Hacker NewsApr 17, 05:00 UTC · Apr 17, 2024Vulnerability

55

Here's why Google is forcing JavaScript use on its sign

CyberScoopNov 1, 14:45 UTC · Nov 1, 2018Exploit / PoC in the wild

60

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

The Hacker NewsJun 26, 07:33 UTC · Jun 26, 2026Vulnerability CVE-2026-26980

60

Attackers exploit critical Flowise flaw CVE-2025

Security AffairsApr 7, 20:16 UTC · Apr 7, 2026Exploit / PoC in the wildCVE-2025-59528 CVE-2025-8943 CVE-2025-26319

60

CERT/CC Warns binary-parser Bug Allows Node.js Privilege

The Hacker NewsJan 27, 14:10 UTC · Jan 27, 2026Vulnerability CVE-2026-12451

60

GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade Detection

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Malware

55

5 Threats That Reshaped Web Security This Year [2025]

The Hacker NewsDec 4, 11:30 UTC · Dec 4, 2025Vulnerability CVE-2025-54135 CVE-2025-53109 CVE-2025-55284

60

Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor CVE-2023-23397

60

Google addressed the tenth actively exploited Chrome zero

Security AffairsAug 26, 22:59 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7965 CVE-2024-7971 CVE-2024-5274+7 CVEs

60

A Data Exfiltration Attack Scenario: The Porsche Experience

The Hacker NewsJul 28, 11:48 UTC · Jul 28, 2023Exploit / PoC

60

Week in review: Avast breach, deepfakes, VisibleV8 monitors JavaScript in the wild

Help Net SecurityOct 27, 00:00 UTC · Oct 27, 2019Data breach

60

Mysterious hackers ingenuously reveal two Zero

Security AffairsMay 16, 11:49 UTC · May 16, 2018Exploit / PoC CVE-2018-4990 CVE-2018-8120

60

Zerodium is offers $1 Million for Tor Browser Exploits

Security AffairsNov 4, 09:24 UTC · Nov 4, 2017Exploit / PoC

60

The anatomy of Flashfake. Part 2

Kaspersky SecurelistMay 24, 10:27 UTC · May 24, 2012Exploit / PoC

60

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Hacker NewsJul 30, 07:40 UTC · Jul 30, 2026Data breach CVE-2026-42897 CVE-2025-66376

60

New Chrome Zero-Day

Schneier on SecuritySep 10, 11:04 UTC · Sep 10, 2024Exploit / PoC CVE-2024-7971

60

Google addressed the ninth actively exploited Chrome zero

Security AffairsAug 26, 22:50 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7971 CVE-2024-0519 CVE-2024-2887+6 CVEs

60

Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

The Hacker NewsJun 28, 04:05 UTC · Jun 28, 2024Vulnerability CVE-2024-34102 CVE-2024-2961

60

Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader SaintBot

Palo Alto Unit 42Jun 5, 23:28 UTC · Jun 5, 2024Malware CVE-2017-11882

60

Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

The Hacker NewsApr 20, 04:45 UTC · Apr 20, 2023Vulnerability CVE-2023-29199 CVE-2023-30547 CVE-2023-29017+1 CVEs

60

Researchers Detail Critical RCE Flaw Reported in Popular vm2 JavaScript Sandbox

The Hacker NewsOct 11, 11:28 UTC · Oct 11, 2022Vulnerability CVE-2022-36067

60

Google aims to improve security of browser engines, third-party Android devices and apps on Google Play

Help Net SecurityOct 7, 11:57 UTC · Oct 7, 2020Exploit / PoC in the wild

60

Over 800K WordPress sites are at risk due to a flaw in Ninja Forms plugin

Security AffairsMay 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild

60

Flaws in Popup Builder WordPress plugin expose 100K+ websites to hack

Security AffairsMar 13, 11:42 UTC · Mar 13, 2020Exploit / PoC in the wildCVE-2020-10196 CVE-2020-10195

60