Search: “JavaScript downloaders”

412 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1009 Vulnerability 335 Ransomware 192 Threat actor 144 Exploit / PoC 133 Phishing & fraud 72 Data breach 67 Advisory 18 Industry 18 Research 12 Policy & legal 10 AI tools & infra 6 AI safety & security 5 Tools 1

SeverityAll critical 412 high 1017 medium 522 low 55 info 16

New Flaw in WordPress Plugin Used by Over a Million Sites Under Active Exploitation

The Hacker NewsMay 20, 04:02 UTC · May 20, 2023Exploit / PoC in the wildCVE-2023-32243

60

Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026

The Hacker NewsMar 21, 07:03 UTC · Mar 21, 2026Ransomware in the wildCVE-2026-20131

60

9 vulnerabilities found in VPN software, including 1 critical issue that could lead to remote code execution

Cisco TalosOct 25, 16:00 UTC · Oct 25, 2023Vulnerability CVE-2023-22325 CVE-2023-23581 CVE-2023-22308+16 CVEs

60

GootLoader uses malformed ZIP files to bypass security controls

Security AffairsJan 18, 18:22 UTC · Jan 18, 2026Malware

55

MS06

Kaspersky SecurelistAug 25, 12:17 UTC · Aug 25, 2006Vulnerability

55

Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure

The Hacker NewsJan 11, 05:29 UTC · Jan 11, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887

60

Kaspersky Security Bulletin: Review of the Year 2017

Kaspersky SecurelistDec 5, 10:00 UTC · Dec 5, 2017Advisory

55

Cryptomining attacks against Apple devices increase sharply

Help Net SecurityOct 16, 00:00 UTC · Oct 16, 2018Ransomware CVE-2017-7269 CVE-2017-5638 CVE-2016-6309

60

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Vulnerability CVE-2024-50050 CVE-2025-30165 CVE-2025-23254+1 CVEs

60

Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

The Hacker NewsJan 19, 07:42 UTC · Jan 19, 2024Malware

55

VS Code extensions with 125M+ installs expose users to cyberattacks

Security AffairsFeb 18, 15:14 UTC · Feb 18, 2026Vulnerability CVE-2025-65715 CVE-2025-65716 CVE-2025-657171

60

AI-assisted Slopoly malware powers Hive0163’s ransomware campaigns

Security AffairsMar 13, 11:36 UTC · Mar 13, 2026Ransomware

60

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

The Hacker NewsDec 9, 05:09 UTC · Dec 9, 2023Vulnerability in the wildCVE-2023-26360

60

Microsoft Updates September 2014

Kaspersky SecurelistSep 11, 01:54 UTC · Sep 11, 2014Exploit / PoC CVE-2013-7331

60

Malware Evolution: April Roundup

Kaspersky SecurelistMay 13, 18:44 UTC · May 13, 2005Malware

55

Attackers exploit cPanel CVE-2026

Security AffairsMay 12, 11:41 UTC · May 12, 2026Ransomware in the wildCVE-2026-419401

60

⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-21509 CVE-2026-1281 CVE-2026-1340

60

node-ipc NPM Package sabotage to protest Ukraine invasion

Security AffairsMar 18, 00:16 UTC · Mar 18, 2022Vulnerability CVE-2022-23812

60

Kaspersky researchers warns Linkedin from potential spear phishing

Kaspersky SecurelistJul 23, 11:59 UTC · Jul 23, 2015Phishing & fraud

55

Microsoft releases patch for .wmf vulnerability

Kaspersky SecurelistJan 6, 13:27 UTC · Jan 6, 2006Vulnerability

55

Firefox Blocks Inline and Eval JavaScript on Internal Pages to Prevent Injection Attacks

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2019Vulnerability

55

Pwn2Own Tokyo 2018

Security AffairsNov 15, 07:32 UTC · Nov 15, 2018Vulnerability

55

New EtherRAT backdoor surfaces in React2Shell attacks tied to North Korea

Security AffairsDec 10, 14:45 UTC · Dec 10, 2025Malware CVE-2025-55182

60

SAP-Related npm Packages Compromised in Credential

The Hacker NewsApr 30, 16:39 UTC · Apr 30, 2026Data breach

60

US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

Security AffairsJul 24, 08:31 UTC · Jul 24, 2026Vulnerability in the wildCVE-2025-66376

60

Take a walk on the client side: The importance of front-end JavaScript security assessments

Help Net SecurityMar 9, 20:14 UTC · Mar 9, 2023Data breach

60

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

TA829 and UNK_GreenSec Share Tactics and Infrastructure in Ongoing Malware Campaigns

The Hacker NewsJul 3, 09:00 UTC · Jul 3, 2025Malware

55

Banking Trojan attacks increase, large scale Ramnit campaign impacts organizations worldwide

Help Net SecuritySep 12, 00:00 UTC · Sep 12, 2018Malware CVE-2017-7269 CVE-2017-5638 CVE-2014-0160+1 CVEs

60

EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

The Hacker NewsJun 7, 15:47 UTC · Jun 7, 2026Malware1

55

JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

The Hacker NewsDec 2, 05:40 UTC · Dec 2, 2025Malware

55

10 Credential Stealing Python Libraries Found on PyPI Repository

The Hacker NewsAug 10, 05:22 UTC · Aug 10, 2022Malware

55

Investigating a New Click

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware

55

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams

Help Net SecurityMay 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-4670 CVE-2026-5174+4 CVEs

60

IntelOwl: Open-source threat intelligence management

Help Net SecurityAug 14, 00:00 UTC · Aug 14, 2024Ransomware

60

Researchers disclose sandbox escape bug in vm2 sandbox library

Security AffairsApr 9, 20:34 UTC · Apr 9, 2023Exploit / PoC CVE-2023-29017 CVE-2022-36067

60

Microsoft Patch Tuesday

Cisco TalosDec 12, 23:32 UTC · Dec 12, 2017Vulnerability in the wildCVE-2017-11886 CVE-2017-11888 CVE-2017-11889+31 CVEs

60

Lazarus Group deceives developers with 6 new malicious npm packages

CyberScoopMar 12, 22:31 UTC · Mar 12, 2025Threat actor in the wild1

60

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

The Hacker NewsMay 26, 05:19 UTC · May 26, 2026Exploit / PoC CVE-2026-5426

60

U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer

Krebs on SecurityNov 28, 22:54 UTC · Nov 28, 2022Malware

55