Remote and hybrid work didn’t just change where people work. It changed how documents move between people. Files are no ...

NovaCookies proxies Microsoft 365 sign-ins through attacker infrastructure to steal sessions using Docusign lures and OAuth ...

Threat actors are using fully functional productivity applications to deliver Projextor malware through the same Electron ...

Unidentified Anomalous Phenomena is the official term used by the US government and scientists to describe objects such as these. Distinct from Unidentified Flying Objects, UAP's can be found on land ...

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless malware attacks that evade detection. magnific.com Cybersecurity researchers ...

A massive CountLoader malware campaign aimed at stealing cryptocurrency. Threat actors are using a complex, multi-stage attack chain involving obfuscated JavaScript and PowerShell scripts to bypass ...

# make-pdf-javascript, use it to create a PDF document with embedded JavaScript that will execute automatically when the document is opened """make-pdf-javascript, use it to create a PDF document with ...

Unknown attackers have exploited a zero-day Adobe Acrobat Reader vulnerability since November 2025 and possibly even earlier, security researcher Haifei Li has discovered. Haifei Li is one of the ...

Security updates addressing critical cross-site scripting (XSS) vulnerabilities in Foxit PDF Editor Cloud that could allow attackers to execute arbitrary JavaScript code in users’ browsers. The ...

As part of the 'DOOM Challenge' to install the FPS 'DOOM' on everything, 'DoomPDF', which ported DOOM to a PDF file, appeared in January 2025. DoomPDF uses the PDF JavaScript environment to represent ...

The jsPDF library for generating PDF documents in JavaScript applications is vulnerable to a critical vulnerability that allows an attacker to steal sensitive data from the local filesystem by ...