Sandbreak – A Critical Remote Code Execution Bug Found in Widely Used vm2 JavaScript Sandbox

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the JavaScript sandbox library vm2, the cybersecurity analysts at Oxeye research team have recently found a severe RCE flaw dubbed, “Sandbreak.” Through the NPM package repository, the vm2 sandbox …

Darkweb Market BidenCash Released Massive Dump of 1.2 Million Credit Cards for Free

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new advertisement dump from dark web carding shop BidenCash has been released. This dump includes a massive dump of more than 1.2 Million Credit Cards (1,221,551 credit cards). While …

What You Need To Know About Penetration Testing as a Service

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There are two primary types of penetration testing: traditional penetration testing and penetration testing as a service. While both have their benefits, penetration testing as a service offers several advantages …

Meta Sues App Developers to Steal Over One Million WhatsApp Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, a number of Chinese companies have been sued by Meta because they have created and used “unofficial” WhatsApp Android apps that were developed without the consent of WhatsApp. It …

PHP Supply Chain Attack – Critical Vulnerability in PHP Central Component

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Packagist has been subjected to a serious vulnerability that impacts its functionality, as reported by the code security company, SonarSource. A supply chain attack targeting the PHP community might …