Search: “javascript”

2,511 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 2065 Vulnerability 1230 Exploit / PoC 533 Ransomware 333 Threat actor 299 Data breach 242 Phishing & fraud 213 Industry 68 Policy & legal 56 Research 38 Advisory 36 AI tools & infra 32 AI safety & security 17 AI research 7

SeverityAll critical 1289 high 2520 medium 1080 low 227 info 63

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence

The Hacker NewsApr 10, 09:55 UTC · Apr 10, 2025Malware

42

Multi-Layered TDS Infrastructure Linked to Major Cyber Threats

Recorded FutureSep 5, 00:00 UTC · Sep 5, 2024Ransomware

57

Akamai introduces new capabilities to simplify PCI DSS 4.0 compliance for organizations

Help Net SecurityOct 3, 00:00 UTC · Oct 3, 2023Vulnerability

42

Powerful JavaScript Dropper PindOS Distributes Bumblebee and IcedID Malware

The Hacker NewsJun 23, 10:47 UTC · Jun 23, 2023Malware

42

Hackers Using Fake DDoS Protection Pages to Distribute Malware

The Hacker NewsAug 24, 17:35 UTC · Aug 24, 2022Malware

42

25 Malicious JavaScript Libraries Distributed via Official NPM Package Repository

The Hacker NewsFeb 23, 06:30 UTC · Feb 23, 2022Malware

42

Check What Information Your Browser Leaks

Schneier on SecuritySep 28, 14:51 UTC · Sep 28, 2021Policy & legal

42

FIN7 group leverages WIN 11 Alpha

Security AffairsSep 4, 13:06 UTC · Sep 4, 2021Malware

42

Silver Sparrow, a new malware infects Mac systems using Apple M1 chip

Security AffairsFeb 20, 14:09 UTC · Feb 20, 2021Malware1

42

Masslogger campaigns exfiltrates user credentials

Cisco TalosFeb 17, 13:00 UTC · Feb 17, 2021Threat actor

57

Malicious NPM project steals browser info and Discord accounts

Security AffairsNov 10, 15:13 UTC · Nov 10, 2020Data breach

57

Prototype Pollution flaw discovered in all versions of Lodash Library

Security AffairsJul 9, 17:50 UTC · Jul 9, 2019Exploit / PoC CVE-2019-10744

60

PoC Released for Outlook Flaw that Microsoft Patched 6 Month After Discovery

The Hacker NewsJun 22, 16:59 UTC · Jun 22, 2019Exploit / PoC CVE-2019-1105

60

The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries

Troy HuntFeb 12, 07:59 UTC · Feb 12, 2018Malware

42

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

The Hacker NewsJul 3, 16:07 UTC · Jul 3, 2026Data breach

57

Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government Targets

Security AffairsMay 23, 09:39 UTC · May 23, 2026Data breach

57

Ivanti warns customers of new EPM flaw enabling remote code execution

Security AffairsDec 9, 22:11 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-10573 CVE-2024-13159 CVE-2024-13160+1 CVEs

60

SideWinder APT Strikes Middle East and Africa With Stealthy Multi

The Hacker NewsOct 28, 03:55 UTC · Oct 28, 2025Vulnerability CVE-2017-11882

47

North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts

The Hacker NewsOct 17, 04:33 UTC · Oct 17, 2025Malware

42

18 Popular Code Packages Hacked, Rigged to Steal Crypto

Krebs on SecuritySep 9, 02:21 UTC · Sep 9, 2025Data breach

57

How to Avoid the Common Pitfalls While Browsing the Web

Recorded FutureJul 31, 00:00 UTC · Jul 31, 2025Data breach

57

ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread Info

The Hacker NewsMar 19, 10:59 UTC · Mar 19, 2025Vulnerability CVE-2017-0199

47

China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike Espionage Campaign

The Hacker NewsNov 22, 16:47 UTC · Nov 22, 2024Threat actor

57

Threat Spotlight: WarmCookie/BadSpace

Cisco TalosOct 23, 10:02 UTC · Oct 23, 2024Malware

42

Security Experts Warn of Two Primary Client-Side Risks Associated with Data Exfiltration and Loss

The Hacker NewsJul 19, 11:23 UTC · Jul 19, 2022Threat actor

57

Iranian linked conglomerate MuddyWater comprised of regionally focused subgroups

Cisco TalosMar 10, 13:02 UTC · Mar 10, 2022Ransomware

57

DarkWatchman RAT uses Windows Registry fileless storage mechanism

Security AffairsDec 20, 23:39 UTC · Dec 20, 2021Malware

42

New Fileless Malware Uses Windows Registry as Storage to Evade Detection

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2021Malware

42

Hackers Increasingly Using HTML Smuggling in Malware and Phishing Attacks

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2021Malware

42

Millions of sites could be hacked due to flaws in popular WordPress plugins

Security AffairsMar 19, 16:40 UTC · Mar 19, 2021Vulnerability

42

Malicious npm packages spotted delivering njRAT Trojan

Security AffairsDec 1, 21:07 UTC · Dec 1, 2020Malware

42

Cisco Talos discloses technicals details of Chrome, Firefox flaws

Security AffairsJul 5, 12:34 UTC · Jul 5, 2020Vulnerability CVE-2020-6463 CVE-2020-12418

47

Magecart Hackers Infect 17,000 Sites Through Misconfigured Amazon S3 Buckets

The Hacker NewsJul 11, 07:34 UTC · Jul 11, 2019Malware

42

Unpatched Prototype Pollution Flaw Affects All Versions of Popular Lodash Library

The Hacker NewsJul 9, 16:08 UTC · Jul 9, 2019Vulnerability CVE-2019-10744

47

The Long Run of Shade Ransomware

Security AffairsFeb 19, 14:47 UTC · Feb 19, 2019Ransomware

57

Hackers infect e-commerce sites by compromising their advertising partner

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2019Vulnerability

42

NemucodAES ransomware & Kovter trojan bundled in the same campaigns

Security AffairsOct 9, 10:00 UTC · Oct 9, 2017Ransomware

57

Spam and phishing in 2016

Kaspersky SecurelistFeb 20, 10:57 UTC · Feb 20, 2017Phishing & fraud

42

ASLR Protection could be bypassed by visiting a website.Millions of devices at risk

Security AffairsFeb 17, 11:06 UTC · Feb 17, 2017Exploit / PoC CVE-2017-5925 CVE-2017-5926 CVE-2017-5927+1 CVEs

60

Reminder: be careful opening invoices on the 21st March

Kaspersky SecurelistMar 15, 08:37 UTC · Mar 15, 2013Vulnerability CVE-2010-0188

47