Spring4Shell extends to Glassfish and Payara: same vulnerability, new exploit

GlassWASM: Trojanized VS Code Extensions on Open VSX Deliver WebAssembly Malware via Solana Blockchain

Socket's Threat Research team discovered trojanized Visual Studio Code extensions on the Open VSX marketplace that deliver a TinyGo-compiled

How a Compromised Next.js Dependency Led to Server Hacking and Monero Mining

A developer shares their experience of discovering their Hetzner server was hacked and used for Monero cryptocurrency mining. The article de

How to Find and Exploit Misconfigured IIS Servers in Bug Bounty Hunting

A technical walkthrough on identifying and exploiting misconfigured Microsoft IIS web servers during bug bounty hunting. The article covers

React2Shell to real-world breach: How an unpatched dev server led to a Windows compromise

GlassWorm: First Self-Propagating Worm Targets VS Code Extensions with Invisible Code

Researchers have discovered GlassWorm, the world's first self-propagating worm targeting VS Code extensions on the OpenVSX marketplace. This

Microsoft zero-day feud escalates as researcher threatens major exploit release on July 14

The ongoing feud between Microsoft and security researcher Nightmare Eclipse (aka Chaotic Eclipse) has escalated, with the researcher having

Microsoft zero-day feud escalates as researcher threatens major exploit release on July 14

The ongoing feud between Microsoft and security researcher Nightmare Eclipse (aka Chaotic Eclipse) has escalated, with the researcher having