Search: “javascript”

5,153 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 2065 Vulnerability 1230 Exploit / PoC 533 Ransomware 333 Threat actor 297 Data breach 242 Phishing & fraud 211 Industry 68 Policy & legal 56 Research 38 Advisory 36 AI tools & infra 32 AI safety & security 17 AI research 7

SeverityAll critical 1289 high 2518 medium 1078 low 227 info 63

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence

The Hacker NewsApr 10, 09:55 UTC · Apr 10, 2025Malware

42

New Chrome Zero-Day

Schneier on SecuritySep 10, 11:04 UTC · Sep 10, 2024Exploit / PoC CVE-2024-7971

60

Multi-Layered TDS Infrastructure Linked to Major Cyber Threats

Recorded FutureSep 5, 00:00 UTC · Sep 5, 2024Ransomware

57

Google addressed the ninth actively exploited Chrome zero

Security AffairsAug 26, 22:50 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7971 CVE-2024-0519 CVE-2024-2887+6 CVEs

60

Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

The Hacker NewsJun 28, 04:05 UTC · Jun 28, 2024Vulnerability CVE-2024-34102 CVE-2024-2961

60

Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader SaintBot

Palo Alto Unit 42Jun 5, 23:28 UTC · Jun 5, 2024Malware CVE-2017-11882

60

Sign1 malware campaign already infected 39,000 WordPress sites

Security AffairsMar 23, 13:00 UTC · Mar 23, 2024Malware

30

Massive Sign1 Campaign Infects 39,000+ WordPress Sites with Scam Redirects

The Hacker NewsMar 22, 11:27 UTC · Mar 22, 2024Threat actor

45

Triangulation: validators, post

Kaspersky SecurelistOct 23, 11:00 UTC · Oct 23, 2023Threat actor

45

Akamai introduces new capabilities to simplify PCI DSS 4.0 compliance for organizations

Help Net SecurityOct 3, 00:00 UTC · Oct 3, 2023Vulnerability

42

Powerful JavaScript Dropper PindOS Distributes Bumblebee and IcedID Malware

The Hacker NewsJun 23, 10:47 UTC · Jun 23, 2023Malware

42

Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

The Hacker NewsApr 20, 04:45 UTC · Apr 20, 2023Vulnerability CVE-2023-29199 CVE-2023-30547 CVE-2023-29017+1 CVEs

60

Researchers Detail Critical RCE Flaw Reported in Popular vm2 JavaScript Sandbox

The Hacker NewsOct 11, 11:28 UTC · Oct 11, 2022Vulnerability CVE-2022-36067

60

Hackers Using Fake DDoS Protection Pages to Distribute Malware

The Hacker NewsAug 24, 17:35 UTC · Aug 24, 2022Malware

42

Overview of phishing HTML attachments in e

Kaspersky SecurelistMay 16, 08:00 UTC · May 16, 2022Phishing & fraud

30

25 Malicious JavaScript Libraries Distributed via Official NPM Package Repository

The Hacker NewsFeb 23, 06:30 UTC · Feb 23, 2022Malware

42

Check What Information Your Browser Leaks

Schneier on SecuritySep 28, 14:51 UTC · Sep 28, 2021Policy & legal

42

FIN7 group leverages WIN 11 Alpha

Security AffairsSep 4, 13:06 UTC · Sep 4, 2021Malware

42

Silver Sparrow, a new malware infects Mac systems using Apple M1 chip

Security AffairsFeb 20, 14:09 UTC · Feb 20, 2021Malware1

42

Masslogger campaigns exfiltrates user credentials

Cisco TalosFeb 17, 13:00 UTC · Feb 17, 2021Threat actor

57

The chronicles of Emotet

Kaspersky SecurelistDec 4, 10:00 UTC · Dec 4, 2020Malware

30

Malicious NPM project steals browser info and Discord accounts

Security AffairsNov 10, 15:13 UTC · Nov 10, 2020Data breach

57

Google aims to improve security of browser engines, third-party Android devices and apps on Google Play

Help Net SecurityOct 7, 11:57 UTC · Oct 7, 2020Exploit / PoC in the wild

60

Over 800K WordPress sites are at risk due to a flaw in Ninja Forms plugin

Security AffairsMay 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild

60

Flaws in Popup Builder WordPress plugin expose 100K+ websites to hack

Security AffairsMar 13, 11:42 UTC · Mar 13, 2020Exploit / PoC in the wildCVE-2020-10196 CVE-2020-10195

60

Friday Squid Blogging: "How the Squid Lost Its Shell"

Schneier on SecurityJan 29, 08:02 UTC · Jan 29, 2020Vulnerability

30

Chrome 0-day exploit CVE-2019

Kaspersky SecurelistNov 1, 16:00 UTC · Nov 1, 2019Exploit / PoC CVE-2019-13720

60

Prototype Pollution flaw discovered in all versions of Lodash Library

Security AffairsJul 9, 17:50 UTC · Jul 9, 2019Exploit / PoC CVE-2019-10744

60

PoC Released for Outlook Flaw that Microsoft Patched 6 Month After Discovery

The Hacker NewsJun 22, 16:59 UTC · Jun 22, 2019Exploit / PoC CVE-2019-1105

60

Protecting applications from malicious scripts

Help Net SecurityOct 17, 00:00 UTC · Oct 17, 2018Data breach

60

Zerodium disclose exploit for NoScript bug in version 7 of Tor Browser

Security AffairsSep 11, 07:57 UTC · Sep 11, 2018Exploit / PoC

60

The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries

Troy HuntFeb 12, 07:59 UTC · Feb 12, 2018Malware

42

Samsung Android Browser is affected by a critical SOP bypass issue, a Metasploit exploit code is available

Security AffairsDec 29, 16:14 UTC · Dec 29, 2017Exploit / PoC CVE-2017-17692

60

Critical "Same Origin Policy" Bypass Flaw Found in Samsung Android Browser

The Hacker NewsDec 29, 12:26 UTC · Dec 29, 2017Exploit / PoC CVE-2017-17692

60

Experts at ZDI reported two critical Zero

Security AffairsAug 22, 07:57 UTC · Aug 22, 2017Exploit / PoC CVE-2017-10951 CVE-2017-10952

60

Learn How to Code: Get 10 Best Online Training Courses for Just $49

The Hacker NewsAug 3, 16:06 UTC · Aug 3, 2017Research

30

When A Pony Walks Out Of A Pub

Cisco TalosFeb 7, 16:33 UTC · Feb 7, 2017Malware1

30

Want Tofsee My Pictures? A Botnet Gets Aggressive

Cisco TalosSep 29, 15:02 UTC · Sep 29, 2016Malware

30

Domain Shadowing Goes Nuclear: A Story in Failed Sophistication

Cisco TalosJun 16, 09:57 UTC · Jun 16, 2015Threat actor

45

Micro optimising web content for unexpected, wild success

Troy HuntDec 12, 00:00 UTC · Dec 12, 2013Data breach

45