Search: “javascript”

5,152 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 2064 Vulnerability 1230 Exploit / PoC 533 Ransomware 333 Threat actor 297 Data breach 242 Phishing & fraud 211 Industry 68 Policy & legal 56 Research 38 Advisory 36 AI tools & infra 32 AI safety & security 17 AI research 7

SeverityAll critical 1289 high 2518 medium 1077 low 227 info 63

The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell

The Hacker NewsJun 7, 10:40 UTC · Jun 7, 2024Threat actor1

45

ChromeLoader: New Stubborn Malware Campaign

Palo Alto Unit 42Jun 5, 20:20 UTC · Jun 5, 2024Malware

30

New Wave of JSOutProx Malware Targeting Financial Firms in APAC and MENA

The Hacker NewsApr 9, 03:52 UTC · Apr 9, 2024Malware

30

Balada Injector still at large

Security AffairsAug 9, 20:12 UTC · Aug 9, 2023Vulnerability

42

A Data Exfiltration Attack Scenario: The Porsche Experience

The Hacker NewsJul 28, 11:48 UTC · Jul 28, 2023Exploit / PoC

60

Threat actors have abused a legitimate feature of the Google Tag Manager service to secretly add and deploy malicious JavaScript code to more than 300 e

The RecordJan 20, 00:00 UTC · Jan 20, 2023Threat actor

45

New CPU side-channel attack takes aim at Chrome's Site Isolation feature

The RecordJan 18, 00:00 UTC · Jan 18, 2023Vulnerability

30

New JavaScript malware works as a "RAT dispenser"

The RecordDec 19, 00:00 UTC · Dec 19, 2022Malware

30

Malware Strains Targeting Python and JavaScript Developers Through Official Repositories

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2022Malware

42

Contrast Scan empowers developers to analyze front-end code for vulnerabilities

Help Net SecurityOct 6, 00:00 UTC · Oct 6, 2022Vulnerability

30

Vulnerability Spotlight: Vulnerabilities in Lansweeper could lead to JavaScript, SQL injections

Cisco TalosFeb 24, 12:00 UTC · Feb 24, 2022Vulnerability in the wildCVE-2022-22149 CVE-2022-21234 CVE-2022-21210+1 CVEs

60

Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructure

Cisco TalosJan 12, 13:02 UTC · Jan 12, 2022Malware

30

This New Stealthy JavaScript Loader Infecting Computers with Malware

The Hacker NewsNov 27, 06:23 UTC · Nov 27, 2021Malware

30

Necro Python bot adds new exploits and Tezos mining to its bag of tricks

Cisco TalosJun 3, 12:00 UTC · Jun 3, 2021Vulnerability CVE-2021-3129 CVE-2020-14882 CVE-2017-0144

47

Visa warns of new sophisticated credit card skimmer dubbed Baka

Security AffairsSep 6, 14:14 UTC · Sep 6, 2020Vulnerability

30

Friday Squid Blogging: How the Squid Lost Its Shell

Schneier on SecurityJan 29, 08:02 UTC · Jan 29, 2020Malware

30

Operation Night Fury: Group-IB helps take down a cybergang behind the infection of hundreds of websites all over the world

Security AffairsJan 27, 10:40 UTC · Jan 27, 2020Data breach

45

JsOutProx: A New Enterprise Grade Implant ... ... ... ...

Security AffairsDec 20, 13:46 UTC · Dec 20, 2019Malware

30

TA505 Cybercrime targets system integrator companies

Security AffairsNov 12, 13:50 UTC · Nov 12, 2019Ransomware

57

Week in review: Avast breach, deepfakes, VisibleV8 monitors JavaScript in the wild

Help Net SecurityOct 27, 00:00 UTC · Oct 27, 2019Data breach

60

CoinHive URL Shortener Abused to Secretly Mine Cryptocurrency Using Hacked Sites

The Hacker NewsJul 4, 08:25 UTC · Jul 4, 2018Malware

42

Mysterious hackers ingenuously reveal two Zero

Security AffairsMay 16, 11:49 UTC · May 16, 2018Exploit / PoC CVE-2018-4990 CVE-2018-8120

60

New Pluralsight Course: JavaScript Security Play by Play

Troy HuntMay 3, 07:23 UTC · May 3, 2018Vulnerability

30

Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader

Cisco TalosApr 19, 17:05 UTC · Apr 19, 2018Vulnerability in the wildCVE-2017-14458 CVE-2018-3842 CVE-2018-3843+2 CVEs

60

Zerodium is offers $1 Million for Tor Browser Exploits

Security AffairsNov 4, 09:24 UTC · Nov 4, 2017Exploit / PoC

60

Apple iOS 10.3 Fixes Safari Flaw Used in JavaScript

The Hacker NewsMar 28, 12:33 UTC · Mar 28, 2017Ransomware

57

PAC

Kaspersky SecurelistOct 4, 02:58 UTC · Oct 4, 2013Malware

30

The anatomy of Flashfake. Part 2

Kaspersky SecurelistMay 24, 10:27 UTC · May 24, 2012Exploit / PoC

60

Detecting Obfuscated Malicious JavaScript with Snort and Razorback

Cisco TalosDec 3, 18:02 UTC · Dec 3, 2010Industry

30

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Hacker NewsJul 30, 07:40 UTC · Jul 30, 2026Data breach CVE-2026-42897 CVE-2025-66376

60

PurpleBravo’s Targeting of the IT Software Supply Chain

Recorded FutureJul 22, 00:00 UTC · Jul 22, 2026Vulnerability

42

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The Hacker NewsJul 4, 11:17 UTC · Jul 4, 2026Threat actor

45

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

The Hacker NewsJul 1, 10:25 UTC · Jul 1, 2026Malware1

42

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware

42

GoDaddy found malware on 1,980 WordPress sites using Steam as C2 infrastructure

Security AffairsJun 2, 05:44 UTC · Jun 2, 2026Malware

42

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026AI safety & security CVE-2026-45321

35

GlassWorm Attack Uses Stolen GitHub Tokens to Force

The Hacker NewsMar 21, 07:03 UTC · Mar 21, 2026Data breach

57

Meta and Yandex are de-anonymizing Android users’ web browsing identifiers

Ars Technica · SecurityJun 3, 12:00 UTC · Jun 3, 2025Threat actor

57

Node.js Malware Campaign Targets Crypto Users with Fake Binance and TradingView Installers

The Hacker NewsApr 17, 08:57 UTC · Apr 17, 2025Malware

30

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence

The Hacker NewsApr 10, 09:55 UTC · Apr 10, 2025Malware

42