-
Google Outage Causing Google Charts and Other APIs to Not Work
If you use Google Charts, or other Google API libraries, as part of your web site then you may have noticed that they stopped working. This is being caused by an outage at Google that is causing the older jsapi library and causing the URL to return a 502 error.
- January 31, 2019
- 05:34 PM
0
-
Godaddy Injecting JavaScript That May Break Customer Sites
Domain registrar GoDaddy is injecting JavaScript into US customer websites that could impact the overall performance of the website or even render it inoperable.
- January 14, 2019
- 08:24 AM
4
-
New report: How browser-based attacks are bypassing your security controls
Browser-based attacks, from AITM phishing and ClickFix to malicious OAuth apps and session hijacking, are driving today's biggest breaches.
A new report from Push Security breaks down the techniques attackers are using, real-world case studies, and the detection gaps leaving security teams exposed.
-
Get 91% off The ReactJS Programming Bootcamp Deal
This deal is for a 7 courses and on eBook that contains over 40 hours of training on how to develop using the ReactJS JavaScript framework. Using these courses, you will learn how to get started programming with ReactJS, NodeJS, Flux, and more.
- December 12, 2018
- 07:03 AM
- 0
-
Get 98% off The Complete JavaScript & jQuery Programming Bundle Deal
This deal is for a 7 course bundle that teaches how to get started in JavaScript and jQuery development. These courses will introduce you to JavaScript, jQuery, Bootstrap, React, Redux, and performing Ajax calls.
- December 11, 2018
- 08:20 AM
- 0
-
Backdoor in Popular JavaScript Library Set to Steal Cryptocurrency
A JavaScript library that scores over two million downloads every week has been injected with malicious code for stealing coins from a cryptocurrency wallet.
- November 27, 2018
- 03:31 AM
- 0
-
MageCart Group Sabotages Rival to Ruin Data and Reputation
Cybercriminals in the web-skimming business sabotage their competition by poisoning the payment data they exfiltrate from online stores. The losing party causing them to end up with a big fat nothing and a ruined reputation on underground forums.
- November 21, 2018
- 03:09 AM
- 0
-
Infowars Store Affected by Magecart Credit Card Stealing Hack
A MageCart credit card skimming attack has been discovered on the online store for the Infowars web site. Visitors who purchased anything on the store while the malicious code was present, would have had their payment information sent to the attacker's server in Lithuania.
- November 14, 2018
- 12:03 PM
- 6
-
Abandoned Tweet Counter Hijacked With Malicious Script
An abandoned Tweet counter that was still being loaded by 800+ sites was hijacked with a malicious script that caused visitors to be redirected to scam sites.
- October 17, 2018
- 03:00 AM
- 0
-
New Mozilla Firefox Attack Causes Desktop Version to Crash
A new attack has been created that can crash or freeze the Mozilla Firefox desktop browser simply by visiting a web page that contains an embedded JavaScript script.
- September 24, 2018
- 06:56 AM
- 2
-
Microsoft Office 365 Customers Get Protection Against Malicious Macros
Microsoft extends support for its Antimalware Scan Interface (AMSI) to Office 365 client applications, offering protection against script-based threats at runtime.
- September 14, 2018
- 05:35 PM
- 0
-
Feedify Hacked with Magecart Information Stealing Script
A script used by the customer engagement service Feedify has been hacked to include the malicious MageCart script. MageCart is malicious code used by attackers to steal credit card details and other information from e-commerce sites when a user submits a form.
- September 12, 2018
- 12:51 PM
- 0
-
JavaScript Web Apps and Servers Vulnerable to ReDoS Attacks
JavaScript web apps and web servers are susceptible to a specific type of vulnerabilities/attacks known as regular expression (regex) denial of service (ReDoS).
- August 20, 2018
- 01:00 AM
- 0
-
Compromised JavaScript Package Caught Stealing npm Credentials
A hacker has gained access to a developer's npm account and injected malicious code into a popular JavaScript library, code that was designed to steal the npm credentials of users who utilize the poisoned package inside their projects.
- July 12, 2018
- 12:10 PM
- 0
-
Remote Code Execution Vulnerability Disclosed in Windows JScript Component
A vulnerability exists in the Windows operating system's JScript component that can allow an attacker to execute malicious code on a user's computer.
- May 30, 2018
- 05:35 PM
- 0
-
NPM Fails Worldwide With "ERR! 418 I'm a Teapot" Error
Users of the NPMJavaScript package manager were greeted by a weird error yesterday evening, as their consoles and applications spewed a message of "ERR! 418 I'm a teapot" whenever they tried to update or install a new JavaScript/Node.js package.
- May 29, 2018
- 10:22 AM
- 1
-
Security Flaw Impacts Electron-Based Apps
Security researchers have found a security flaw in Electron, a software framework that has been used in the past half-decade for building a wealth of popular desktop applications.
- May 13, 2018
- 09:28 AM
- 1
-
PoC Developed for CoinHive Mining In Excel Using Custom JavaScript Functions
Within days of Microsoft announcing that they are introducing custom JavaScript equations in Excel, a security researcher has developed a way to use this method to load the CoinHive in-browser JavaScript miner within Excel.
- May 08, 2018
- 10:13 PM
- 0
-
Microsoft Adds Support for JavaScript Functions in Excel
At the Build 2018 developer conference that's taking place these days in Seattle, USA, Microsoft announced support for custom JavaScript functions in Excel.
- May 08, 2018
- 06:26 AM
- 0
-
GLitch Technique Enrolls Graphics Cards in Rowhammer Attacks on Android Phones
A team of academics from the Vrije University in Amsterdam has developed a new hacking technique that uses embedded graphics processing units (GPUs) and support for WebGL to carry out a Rowhammer attack.
- May 03, 2018
- 12:25 PM
- 0
-
Somebody Tried to Hide a Backdoor in a Popular JavaScript npm Package
The Node Package Manager (npm) team avoided a disaster today when it discovered and blocked the distribution of a cleverly hidden backdoor mechanism inside a popular —albeit deprecated— JavaScript package.
- May 03, 2018
- 06:15 AM
- 0
