Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

Adobe patches a critical PDF flaw exploited for months, allowing attackers to bypass sandbox protections and deliver malware. Users urged to update now.

Mythos’s ability to autonomously exploit flaws challenges the notion of ‘secure by default’.

There's a 15-year-old bug hiding in Firefox's element – one of the most boring tags in HTML. It survived over a decade of ...

As the way software is built fundamentally changes, Cloudflare introduces the infrastructure to power millions of autonomous, long-running agents ...

Anthropic's Mythos AI is being called powerful enough to uncover hidden cyber threats, but Mozilla's latest report shows how ...

The vm2 sandbox component of the open-source JavaScript runtime environment Node.js is vulnerable with certain settings.

TCLBANKER is a Brazilian banking trojan that monitors 59 banking and crypto domains. The malware spreads by hijacking victims’ WhatsApp Web sessions and Outlook accounts to send phishing messages to ...

For years, JavaScript has reigned as the undisputed language of the web, powering everything from single-page apps to massive enterprise systems through frameworks like React, Angular, and Vue. But ...