Outlook CSS techniques can spoof Microsoft sign-in and capture passwords, while Gmail image-set() can trigger external ...

Black Hat USA 2026 – Las Vegas – Using email platforms to target users is nothing new in the world of threat actors. Nor is it revolutionary for defenders who've shored up guardrails when it comes to ...

Every time I wrote a regular expression (regex), I would search for one, copy and paste someone else's expression, and adopt it because it seemed to work. When I first started, this was my approach.

I didn't realize how much time I spent on cleanups until regex let me stop.

A critical misconfiguration in Amazon Web Services (AWS) CodeBuild could have allowed complete takeover of the cloud service provider's own GitHub repositories, including its AWS JavaScript SDK, ...

A critical misconfiguration in AWS CodeBuild has allowed attackers to seize control of core AWS GitHub repositories, including the JavaScript SDK that underpins the AWS Console. The issue, dubbed ...

On September 8, 2025, a major supply chain attack targeted popular NPM packages, including debug (357M weekly downloads) and chalk (299M), along with dependencies like ansi-styles, supports-color, ...

In a supply chain attack, attackers injected malware into NPM packages with over 2.6 billion weekly downloads after compromising a maintainer's account in a phishing attack. In the emails, the ...

This blogpost introduces an operation that we named RoundPress, targeting high-value webmail servers with XSS vulnerabilities, and that we assess with medium confidence is run by the Sednit ...

Since October 2024, Microsoft Defender Experts (DEX) has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads that ultimately lead to ...