JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

A fresh wave of phishing emails is exploiting a blind spot in enterprise email security tools — one that most organizations have not closed — by disguising executable JavaScript inside SVG image files ...

In the previous article, I introduced the file size issue that stands in the way of creating decals for Gran Turismo 7, and my custom tool GT7_svg_splitter to solve it. In this article, I will explain ...

US President Donald Trump’s Iran war is damaging the US alliance system as much as it is damaging the Middle East. As European governments resist a war they did not choose, Washington has responded ...

DNN, the leading open-source content management platform (CMS) in the Microsoft ecosystem, has patched a stored cross-site scripting (XSS) vulnerability. It enables hackers to upload malicious SVG ...

Between December 2025 and January 2026, Bangladesh witnessed renewed violence targeting religious minorities, especially Hindus, amid political unrest following Prime Minister Sheikh Hasina’s ouster.

Security researcher Lyra Rebane has devised a novel clickjacking attack that relies on Scalable Vector Graphics (SVG) and Cascading Style Sheets (CSS). Clickjacking refers to various ways of tricking ...

Microsoft Threat Intelligence recently detected and blocked a credential phishing campaign that likely used AI-generated code to obfuscate its payload and evade traditional defenses. Appearing to be ...

VirusTotal has discovered a phishing campaign hidden in SVG files that create convincing portals impersonating Colombia's judicial system that deliver malware. VirusTotal detected this campaign after ...

Cybersecurity researchers have flagged a new malware campaign that has leveraged Scalable Vector Graphics (SVG) files as part of phishing attacks impersonating the Colombian judicial system. The SVG ...