Security News

A security researcher has demonstrated a new way to track mouse movements even if users block JavaScript.

Latest Attack Targets Online Campus Stores in US and CanadaJavaScript sniffers, which are used to skim credit card and other customer data from e-commerce websites, are a persistent threat. In the...

Group-IB Researchers Analyze the Latest Global TrendsJavaScript sniffers - specialized malware that skims credit card information and other data from online shopping - are becoming far more...

A change made several months ago in an open-source JavaScript library introduced a cross-site scripting (XSS) vulnerability in Google Search and likely other Google products. read more

Tired: Booth babes. Wired: Floof babes. Expired: Conference hall carpets Roundup This week we had an NSA reverse-engineering toolkit released at the RSA Conference, a buffer bashed aboard British...

A mystery payload sneaked into a hugely popular JavaScript library was part of a plot to ransack Bitcoins from BitPay’s Copay mobile cryptocoin wallet, it has been alleged.

Yes, even the Tor browser can be spied on by this nasty code Special report Computer science boffins have demonstrated a side-channel attack technique that bypasses recently-introduced privacy...

The good news? Nobody appears to have lost any Bitcoin, says Gate.io This week's hijacking of StatCounter's JavaScript to swipe Bitcoins from a crypto-coin exchange was the result of a web cache...

Gate.io exchange believed to be target of embedded attack One of the top traffic metrics sites on the internet is reportedly being used by criminals to steal bitcoins from a currency exchange.…

Plus, SystemD gets system de-bugged, again Roundup This week there were Hacked Home Hubs, buggered BBC Bits, and PortSmash privilege punch-ups.…