Prototype Pollution flaw discovered in all versions of Lodash LibrarySecurity Affairs·Jul 9, 17:50 UTC · Jul 9, 2019Exploit / PoCCVE-2019-1074460
Unpatched Prototype Pollution Flaw Affects All Versions of Popular Lodash LibraryThe Hacker News·Jul 9, 16:08 UTC · Jul 9, 2019VulnerabilityCVE-2019-1074447
jQuery JavaScript library flaw opens exposes hundreds of millions of sitesSecurity Affairs·Apr 22, 17:56 UTC · Apr 22, 2019Exploit / PoCCVE-2019-11358160
Naming & Shaming Web Polluters: XiongmaiKrebs on Security·Oct 10, 00:54 UTC · Oct 10, 2018Vulnerability42
Project Analyzing Human Language Usage Shuts Down Because ‘Generative AI Has Polluted the Data’404 Media·Sep 19, 15:49 UTC · Sep 19, 2024Industry42
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoSThe Hacker News·Jun 10, 05:08 UTC · Jun 10, 2026VulnerabilityCVE-2026-44289CVE-2026-44290CVE-2026-44291+3 CVEs47
Friday Squid Blogging: On Squid BrainsSchneier on Security·Aug 20, 21:18 UTC · Aug 20, 2021Threat actor57
Over 67,000 Fake npm Packages Flood Registry in WormThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025Malware42
Bad bot traffic reaching an all-time high over the past yearHelp Net Security·Apr 19, 00:00 UTC · Apr 19, 2021Phishing & fraud42
Environmental Regulator Suffers Ransomware BlowInfosecurity Magazine·Jan 18, 10:30 UTC · Jan 18, 2021Ransomware57
AI Data Centers and the Concentration of WealthSchneier on Security·Jul 15, 00:00 UTC · Jul 15, 2026Threat actor57
Researcher Uncovers 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE AttacksThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2025VulnerabilityCVE-2025-49150CVE-2025-53097CVE-2025-58335+8 CVEs147
Software companies must be held liable for British economic security, say MPsThe Record·Nov 24, 14:44 UTC · Nov 24, 2025Ransomware57
“IndonesianFoods” npm Worm Publishes 44,000 Malicious PackagesInfosecurity Magazine·Nov 13, 15:15 UTC · Nov 13, 2025Malware42
Remnants of Lost Continents Are Everywhere. Now, We Finally Know Why.404 Media·Nov 12, 23:23 UTC · Nov 12, 2025Research42
Making privacy sustainable: Incorporating privacy into the ESG agendaHelp Net Security·Nov 5, 11:13 UTC · Nov 5, 2025Data breach57
Deepfakes are rewriting the rules of geopoliticsHelp Net Security·Oct 7, 08:08 UTC · Oct 7, 2025Threat actor57
The Rise of Large-Language-Model OptimizationSchneier on Security·Jan 29, 02:55 UTC · Jan 29, 2025Phishing & fraud42
Node.js Users Beware: Manifest Confusion Attack Opens Door to MalwareThe Hacker News·Jul 5, 09:00 UTC · Jul 5, 2023Malware42
The heated debate over cryptocurrency mining in UkraineThe Record·Jan 17, 00:00 UTC · Jan 17, 2023Ransomware57
Ransomwhere project wants to create a database of past ransomware paymentsThe Record·Dec 12, 00:00 UTC · Dec 12, 2022Ransomware57
Friday Squid Blogging: Mayfly SquidSchneier on Security·Sep 15, 00:00 UTC · Sep 15, 2022Policy & legal42
Hiding Malware inside a model of a neural networkSecurity Affairs·Jul 26, 14:15 UTC · Jul 26, 2021Malware42
Vulnerability Spotlight: A deep dive into macOS SMB serverCisco Talos·Jun 2, 13:13 UTC · Jun 2, 2021Vulnerability42
Friday Squid Blogging: Japanese "Dude Food" Includes SquidSchneier on Security·Jun 22, 16:25 UTC · Jun 22, 2020Vulnerability42
Japanese car-maker giant Honda hit by a ransomware attackSecurity Affairs·Jun 10, 12:01 UTC · Jun 10, 2020Ransomware57
New Research Paper: Prevalence and impact of low-entropy packing schemes in the malware ecosystemCisco Talos·Feb 25, 21:37 UTC · Feb 25, 2020Malware42
Friday Squid Blogging: Piglet Squid VideoSchneier on Security·Jan 29, 08:03 UTC · Jan 29, 2020Policy & legal42
DARPA Wants Research into Resilient Anonymous CommunicationsSchneier on Security·Jan 27, 14:35 UTC · Jan 27, 2020Malware42
Cybersecurity and the 2017 US National Security StrategySchneier on Security·Jan 27, 14:31 UTC · Jan 27, 2020Data breach57
Credit Cards with Changing CVVsSchneier on Security·Jan 27, 14:13 UTC · Jan 27, 2020Phishing & fraud42
The Evolution of Aggah: From Roma225 to the RG CampaignSecurity Affairs·Aug 6, 10:46 UTC · Aug 6, 2019Threat actor57
Apple Phone Phishing Scams Getting BetterKrebs on Security·Jan 7, 16:54 UTC · Jan 7, 2019Phishing & fraud42
Google's whack-a-mole with Android adware continuesHelp Net Security·Jun 26, 21:22 UTC · Jun 26, 2018Malware42
Study: Attack on KrebsOnSecurity Cost IoT Device Owners $323KKrebs on Security·May 7, 17:21 UTC · May 7, 2018Malware42
Chinese IoT Firm Siphoned Text Messages, Call RecordsKrebs on Security·Nov 17, 01:55 UTC · Nov 17, 2016Malware42