Today, we are excited to announce that we have contributed an implementation of the URLPattern API to Node.js, and it […]
New URLPattern API brings improved pattern matching to Node.js and Cloudflare Workers Read More »
A quiet tweak in a popular open-source tool opened the door to a supply chain breach—what started as a targeted
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More Read More »
Cybersecurity researchers have uncovered two malicious extensions in the Visual Studio Code (VSCode) Marketplace that are designed to deploy ransomware
VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware Read More »
If given the choice, most users are likely to favor a seamless experience over complex security measures, as they don’t
How to Balance Password Security Against User Experience Read More »
A critical security flaw has been disclosed in the Next.js React framework that could be potentially exploited to bypass authorization
Last week on Malwarebytes Labs: What Google Chrome knows about you, with Carey Parker (Lock and Code S06E06) Personal data
A week in security (March 17 – March 23) Read More »
This week on the Lock and Code podcast… Google Chrome is, by far, the most popular web browser in the
What Google Chrome knows about you, with Carey Parker (Lock and Code S06E06) Read More »
The supply chain attack involving the GitHub Action “tj-actions/changed-files” started as a highly-targeted attack against one of Coinbase’s open-source projects,
The U.S. Treasury Department has announced that it’s removing sanctions against Tornado Cash, a cryptocurrency mixer service that has been
U.S. Treasury Lifts Tornado Cash Sanctions Amid North Korea Money Laundering Probe Read More »
