Following the acquisition by Cloudflare, Alexander Lichter shares insights into VoidZero and the future plans for Vite and other open-source projects.

Malicious JavaScript campaigns on e-commerce storefronts evaded VirusTotal in 7 of 8 cases, exposing a structural gap in signature-based scanning. Cloudflare's graph neural network caught all eight ...

UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

Threat actors are actively abusing the legitimate Windows utility mshta.exe to execute malicious HTML Application (HTA) files ...

Welcome readers! With this weekly series, we'll walk you through the top developments in AI and cybersecurity and explain why ...

Over the past few years, browsers have continuously evolved. Originally, they were purely display tools for HTML and media. With JavaScript, WebAssembly, WebGL, and WebGPU, they have become ...

JSCeal can steal browser credentials, replay Google sessions using stolen cookies, and modify traffic for cryptocurrency ...

We're so connected to our smartphones nowadays that even when they're charging, we feel the need to use them. I have a charging cable beside my living room couch so I can fuel my phone while I scroll ...

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. The operation has been ...

It’s been three-and-a-half years since generative AI exploded onto the scene. In this past year, progress has continued its relentless pace: Vibe coding took off, companies embraced agentic workflows, ...

This article was featured in New York’s One Great Story newsletter. Sign up here. Amid keeping up with family group texts, friend-group texts, friend-group-going-on-vacation group texts, ...