Cross-Site Scripting (XSS) Cheat Sheet
15 min
Malicious npm packages evade install-script defenses at runtime
State-Aware Fuzzing of JavaScript Engines with LLM-Guided Instrumentation
1
Patchstack Now Protects Your AI-Built Apps
3 min1
Brevo Supply Chain Attack Pushes WordPress Backdoors and ClickFix Malware to 100,000+ Sites
in the wild 6 min
LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)
in the wild 12 min
When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
in the wild 15 min
Exposed Vite servers are being probed for AWS and Azure credentials
in the wild 3 min1
MapLibre Vulnerability Exposes 2.7M Users to Zero-Click Attacks
3 min
Critical MapLibre GL JS Vulnerability Enables Zero-Click XSS Attacks
3 min1
27.5KB language-agnostic WebGPU syntax highlighter
2 min1
Introducing @huggingface/kernels: 200+ WebGPU Kernels for Local AI
1
JavaScript obfuscation: From party trick to phishing kit
The Year in Web Threats: Web Skimmers Take Advantage of Cloud Hosting and More
9 min
Trends in Web Threats: Old Web Skimmer Still Active Today
10 min
Recent Trends in Internet Threats: Common Industries Impersonated in Phishing Attacks, Web Skimmer Analysis and More
12 min1