Over the last month, Barracuda threat analysts have seen the following notable developments in email-based threats targeting ...

"Vibe coding" appeared in early 2025 to describe the simple idea of programming with AI tools. So I tested a range of them — ...

There's a new frontier in treating autoimmune diseases. Today's treatments tamp down the friendly fire but don't fix what's causing it. Now in dozens of studies, scientists are testing ways ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to ...

A critical security vulnerability in the popular JavaScript library expr-eval allows remote code execution. The bug, with a ...

A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...

Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode ...

The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with ...

What if AI-assisted development is less of a threat, and more of a jetpack? This month’s report tackles vibe coding, along ...

Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...

QJS is a CGO-Free, modern, secure JavaScript runtime for Go applications, built on the powerful QuickJS engine and Wazero WebAssembly runtime. QJS allows you to run JavaScript code safely and ...