Search: “javascript”

1,288 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 2067 Vulnerability 1230 Exploit / PoC 534 Ransomware 333 Threat actor 299 Data breach 242 Phishing & fraud 213 Industry 68 Policy & legal 56 Research 38 Advisory 36 AI tools & infra 33 AI safety & security 17 AI research 7

SeverityAll critical 1289 high 2521 medium 1082 low 227 info 64

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621

60

Unpublished security flaws (0days) massively exploited

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wildCVE-2026-75650

60

Critical Magento 2 flaw exploited within 16 hours

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Exploit / PoC

60

Novel WebRTC skimmer bypasses security controls at $100+ billion car maker

Sansec (Magento / e-commerce security)Apr 14, 19:49 UTC · Apr 14, 2026Data breach in the wild

60

Adobe issues emergency fix for Acrobat Reader flaw exploited in the wild (CVE-2026-34621)

Help Net SecurityApr 13, 00:00 UTC · Apr 13, 2026Exploit / PoC in the wildCVE-2026-34621

60

Acrobat Reader zero-day exploited in the wild for many months (CVE-2026-34621)

Help Net SecurityApr 12, 14:38 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-34621

60

Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

The Hacker NewsApr 12, 04:25 UTC · Apr 12, 2026Exploit / PoC CVE-2026-34621

60

Malicious PDF reveals active Adobe Reader zero

Security AffairsApr 9, 19:14 UTC · Apr 9, 2026Data breach

60

Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet

The Hacker NewsApr 8, 11:44 UTC · Apr 8, 2026Malware in the wild

60

Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

The Hacker NewsApr 7, 05:56 UTC · Apr 7, 2026Vulnerability in the wildCVE-2025-59528 CVE-2025-8943 CVE-2025-26319

60

Attack on axios software developer tool threatens widespread compromises

CyberScoopMar 31, 18:24 UTC · Mar 31, 2026Data breach in the wild1

60

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

The Hacker NewsMar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017 CVE-2026-20131

60

Claude Code Security and Magecart: Getting the Threat Model Right

The Hacker NewsMar 18, 11:58 UTC · Mar 18, 2026Data breach

60

Investigating a New Click

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware

55

ClawJacked flaw exposed OpenClaw users to data theft

Security AffairsMar 2, 09:42 UTC · Mar 2, 2026Exploit / PoC

60

Thousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement

The Hacker NewsFeb 28, 17:01 UTC · Feb 28, 2026Exploit / PoC in the wild

60

Flaws in Popular IDE Extensions Allow Data Exfiltration

Infosecurity MagazineFeb 19, 10:45 UTC · Feb 19, 2026Vulnerability CVE-2025-65717 CVE-2025-65716 CVE-2025-65715

60

⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-21509 CVE-2026-1281 CVE-2026-1340

60

Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows

The Hacker NewsFeb 6, 09:39 UTC · Feb 6, 2026Vulnerability CVE-2026-25049 CVE-2025-68613 CVE-2026-21893+10 CVEs1

60

Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution

The Hacker NewsJan 29, 06:05 UTC · Jan 29, 2026Vulnerability CVE-2026-22709 CVE-2022-36067 CVE-2023-29017+5 CVEs1

60

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code

The Hacker NewsJan 26, 16:53 UTC · Jan 26, 2026Exploit / PoC CVE-2025-69264 CVE-2025-69263

60

CISA’s secure-software buying tool had a simple XSS vulnerability of its own

CyberScoopJan 15, 22:47 UTC · Jan 15, 2026Vulnerability in the wild1

60

CodeBuild Flaw Put AWS Console Supply Chain At Risk

Infosecurity MagazineJan 15, 15:00 UTC · Jan 15, 2026Vulnerability in the wild1

60

Microsoft Fixes Three Zero

Infosecurity MagazineDec 10, 09:45 UTC · Dec 10, 2025Exploit / PoC in the wildCVE-2025-62221 CVE-2025-54100 CVE-2025-64671+4 CVEs

60

Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)

Help Net SecurityDec 5, 09:00 UTC · Dec 5, 2025Vulnerability CVE-2025-9491

60

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

The Hacker NewsDec 4, 15:38 UTC · Dec 4, 2025Vulnerability CVE-2025-55182 CVE-2025-66478

60

Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or Uyghurs

The Hacker NewsNov 24, 11:08 UTC · Nov 24, 2025Vulnerability

55

North Korea’s Fraudulent IT Employment Scheme: A Cybersecurity Threat

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Phishing & fraud

55

Hackers Exploit Milesight Routers to Send Phishing SMS to European Users

The Hacker NewsOct 2, 06:34 UTC · Oct 2, 2025Phishing & fraud in the wildCVE-2023-43261

60

TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks

The Hacker NewsSep 17, 18:30 UTC · Sep 17, 2025Malware CVE-2017-0199

60

⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the

The Hacker NewsAug 27, 05:11 UTC · Aug 27, 2025Ransomware in the wildCVE-2018-0171 CVE-2025-43300 CVE-2025-7353+5 CVEs

60

Malware Complexity Jumps 127% in Six Months

Infosecurity MagazineAug 6, 14:00 UTC · Aug 6, 2025Malware

55

Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval

The Hacker NewsAug 5, 13:04 UTC · Aug 5, 2025Vulnerability CVE-2025-541361

60

Phishing campaign targets U.S. Department of Education's G5 portal

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2025Threat actor

60

SOC files: an APT41 attack on government IT services in Africa

Kaspersky SecurelistJul 21, 08:00 UTC · Jul 21, 2025Threat actor

60

AI Cloaking Tools Enable Harder-to-Detect Cyber

Infosecurity MagazineJul 17, 14:00 UTC · Jul 17, 2025Malware

55

CVE-2025-6554 marks the fifth actively exploited Chrome Zero

Security AffairsJul 16, 10:11 UTC · Jul 16, 2025Vulnerability in the wildCVE-2025-6554 CVE-2025-6558 CVE-2025-7656+4 CVEs

60

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog

Security AffairsJul 11, 07:47 UTC · Jul 11, 2025Exploit / PoC in the wildCVE-2025-6554

60

CVE-2025-6554 is the fourth Chrome zero

Security AffairsJul 2, 08:21 UTC · Jul 2, 2025Vulnerability in the wildCVE-2025-6554 CVE-2025-5419 CVE-2025-4664+1 CVEs

60