November 06, 2024

Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign

The Internet is full of cats—and in this case, malware-delivering fake cat websites used for very targeted search engine optimization.

Security OperationsThreat Research

September 01, 2022

S3 Ep98: The LastPass saga – should we stop using password managers? [Audio + Text]

Latest episode - listen now!

Naked Security

August 30, 2022

JavaScript bugs aplenty in Node.js ecosystem – found automatically

How to get the better of bugs in all the possible packages in your supply chain?

Naked Security

January 11, 2022

JavaScript developer destroys own projects in supply chain “lesson”

Two popular open source JavaScript packages recently got "hacked" in a symbolic gesture by the original project creator.

Naked Security

September 06, 2021

Poisoned proxy PACs! The NPM package with a network-wide security hole…

3,000,000 downloads a week... if only they'd read the fastidious manual!

Naked Security

March 17, 2020

Tor browser fixes bug that allows JavaScript to run when disabled

The Tor browser has a bug that could allow JavaScript to execute on websites even when users think they’ve disabled it for maximum anonymity.

Naked Security

March 03, 2020

XSS plugin vulnerabilities plague WordPress users

Thousands of active WordPress plugins have been hit with a swathe of XSS vulnerabilities that could give attackers complete control of the site.

Naked Security

December 16, 2019

Npm patches two serious bugs

JavaScript package users have been warned to update due to a bug that could enable an attacker to infect them with malicious applications.

Naked Security

June 26, 2019

Social engineering forum hacked, user data dumped on rival site

Social Engineered, dedicated to the “Art of Human Hacking,” was gutted, with 55,121 users' details leaked on the same day as the hack.

Naked Security