Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...
CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...
A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...
On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow ...
Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.
The updated SHub stealer variant is called Reaper, and it uses macOS Script Editor, pre-populated with the malicious payload ...
Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come ...
TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Microsoft Exchange Servers are under threat from a zero-day vulnerability, exploited via crafted emails. With no official ...
When OpenAI engineers discovered that a poisoned update to a widely used JavaScript library had executed on two corporate ...
Microsoft warned Exchange Server customers about critical OWA vulnerability CVE-2026-42897 affecting on-premises deployments.
Qoder officially releases version 1.0, upgrading from an AI IDE to an Autonomous Development Desktop. The new version enables autonomous execution of code ...