Security researchers have uncovered a supply-chain campaign distributing a native Linux implant tied to RedC2, a commercial ...

A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting more than 400 packages across multiple unrelated publishers, including packages associated with major ...

Upwind was the first to publicly report that [email protected], a widely used npm package with 154 million weekly downloads, contained a malicious preinstall script that harvested AWS credentials, ...

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on ...