A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...

Whenever I'm working on a target, one of my fixed test-cases is to inspect the site's JavaScript files. Why? Because libraries often contain vulnerable versions — finding a JS file that references an ...

A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to ...

Hackers revive GootLoader with a clever font deception that hides malware in plain sight. Learn how this new visual trick ...

Can not find script file” appears when Windows tries to run a script during startup, but the file linked to that task is ...

The Gootloader malware loader operation has returned after a 7-month absence and is once again performing SEO poisoning to ...

In the new campaign, Gootloader was most likely leveraged by a group known as Storm-0494, as well as its downstream operator, ...

Move fast - miscreants compromised a domain controller in 17 hours Gootloader JavaScript malware, commonly used to deliver ...

Apple today announced the App Store Mini Apps Partner Program, allowing apps that host mini apps and mini games to support In ...

"The threat actors have recently resorted to utilizing JSON storage services like JSON Keeper, JSONsilo, and npoint.io to ...

Apple today released a new update for Safari Technology Preview, the experimental browser that was first introduced in March ...

Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate " ...