The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...
The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...
Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...
A cluster of 19 Chrome and Edge extensions can steal wallet secrets, drain crypto, harvest credentials, and inject code into ...
Mirage2FA uses AiTM phishing to steal Microsoft 365 credentials and authenticated sessions, bypassing conventional MFA and ...
A critical vulnerability in the Node.js sandboxing library, isolated-vm, has exposed a serious risk to AI agents, automation ...
A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates ...
A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.
Iran-linked MuddyWater uses Deno to hide Dindoor backdoor activity, targeting U.S. software, banking, and Canadian organizations.
Joe Grantham is a Staff Writer from the UK with a degree in Classical Studies. His love for gaming is only rivaled by a deep passion for medieval history, which often seeps into his articles. With ...