Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

Adobe patches a critical PDF flaw exploited for months, allowing attackers to bypass sandbox protections and deliver malware. Users urged to update now.

Mythos’s ability to autonomously exploit flaws challenges the notion of ‘secure by default’.

There's a 15-year-old bug hiding in Firefox's element – one of the most boring tags in HTML. It survived over a decade of ...

As the way software is built fundamentally changes, Cloudflare introduces the infrastructure to power millions of autonomous, long-running agents ...

Anthropic's Mythos AI is being called powerful enough to uncover hidden cyber threats, but Mozilla's latest report shows how ...

The vm2 sandbox component of the open-source JavaScript runtime environment Node.js is vulnerable with certain settings.

TCLBANKER is a Brazilian banking trojan that monitors 59 banking and crypto domains. The malware spreads by hijacking victims’ WhatsApp Web sessions and Outlook accounts to send phishing messages to ...

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used JavaScript implementation of Google's Protocol Buffers. The tool is highly ...

For years, JavaScript has reigned as the undisputed language of the web, powering everything from single-page apps to massive enterprise systems through frameworks like React, Angular, and Vue. But ...