Noma Security disclosed SneakPeek, a zero-click vulnerability in Anthropic's Claude Code Desktop preview pane, on. According ...

The tool's HTML preview mechanism had a flaw allowing malicious JavaScript to access local files and exfiltrate cloud ...

I tested REA, GitHub's viral reverse engineering tool, on a 100 MB Electron app. Here's where its static analysis impressed ...

Continuum AI announced OrcaCyber Zero 1.5, its latest frontier cybersecurity reasoning model built to discover critical vulnerabilities, investigate multi-stage attack paths and validate real-world ...

Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...

A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript ...

Worker move goods for despatch in a redistribution centre of US online retail giant Amazon in Horn-Bad Meinberg, western Germany, on December 9, 2024. INA FASSBENDER/AFP via Getty Images Cloudflare's ...

Explore the latest news, real-world incidents, expert analysis, and trends in Vulnerability — only on The Hacker News, the ...

A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In ...

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. The operation has been ...

As part of the Lampion malware campaign we’ve been tracking in recent weeks, we observed a wave of phishing emails designed to impersonate routine financial or administrative communications. The ...

ESET uncovered new Ghostwriter (aka FrostyNeighbor) activity targeting Ukrainian government organizations in a campaign active since March 2026. ESET researchers published a new report documenting ...