Find secrets and API keys in JavaScript files with SecretFinder
python3 SecretFinder.py -i target.com/app.js -o results.html
Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa
#SecretFinder #BugBounty #JavaScriptSecurity #KaliLinux #Recon
New Shai Hulud Malware Variant Turns Developers Into Supply Chain Attack Vectors, Expel Warns cysecurity.news/2026/01/new-… #cloudsecrettheft #developercredentialtheft #JavaScriptsecurity
A critical flaw (CVE-2025-54371) in the form-data package, used by Axios 1.10.0, allows attackers to predict multipart boundaries, risking HTTP parameter pollution and injection. Update to 1.11.0 now!
#AxiosVulnerability #FormData #JavaScriptSecurity
securityonline.info/critical…
A critical vulnerability (CVE-2025-7783, CVSS 9.4) in the Form-Data JavaScript library allows multipart injection and potential RCE due to predictable boundary values.
#FormDataBug #JavaScriptSecurity #MultipartInjection #CybersecurityAlert
securityonline.info/critical…
🎊 Exciting news! Tanya Janca is set to rock the stage at AppSec PNW in Vancouver with her insightful talk on "30 Tips for Secure JavaScript" on June 15th at 11:15 am PT. Join us for a deep dive into JavaScript security!
eventbrite.com/e/4th-annual-…
#AppSecPNW #JavaScriptSecurity
Congratulations to @liran_tal on the publication of your new book, "Node.js Secure Coding"!
In today's JS-dependent tech world, secure coding and reviewing code for security issues are important.
#JavaScriptSecurity #NodeJS
👋😍 ANNOUNCING my new Node.js book!
eval, new Function, the Node.js vm module?
Nah,
Start by adopting secure coding practices
🔮 Learn how to avoid Code Injection in JavaScript
📌 May 15th, 2024 release
🎁 PreOrder now at 70% discount!
nodejs-security.com/book/cod…
✨📆 Our Year in Review 🍿✨
As we bid farewell to another incredible year, we're thrilled to share with you some moments of all the events our team attended in 2023 🎥✨
#JavaScript #JavaScriptSecurity #Compliance #PCIDSSV4 #Events #Jscrambler
🔒Explore the latest insights and strategies to ensure your #JavaScript code stays secure in 2023 and beyond >> hubs.ly/Q01Ry9GL0
#js #javascriptsecurity #jssecuriy #xss
Say hello to Jazzer.js!
Today, we're open sourcing our coverage-guided in-process fuzzing engine for @nodejs. Jazzer.js is based on libfuzzer and brings many of its instrumentation-powered mutations to the #JavaScript ecosystem.
Give it a try on @npmjs!
github.com/CodeIntelligenceT…
#JavaScriptSecurity isn't just about attacks. 👉 #Facebook tracking tool capturing sensitive patient data on over 30% of the top 100 hospitals in America. This is why you need #ClientSideSecurity. #WAF #CSP won't find this. hubs.la/Q01dShmp0
Can you name the 5 things that are critical to developing secure JavaScript web applications? #JavaScriptSecurity #Feroot Find out in our new blog hubs.la/Q01d8wyh0
Can you name the 5 things that are critical to developing secure JavaScript web applications? #JavaScriptSecurity #Feroot Find out in our new blog hubs.la/Q01d8wyf0
What #JavaScriptSecurity steps should you be following to ensure your website and customer data is protected from attack? Find out in our new blog 10 JavaScript Security Best Practices for Business Websites. #Feroot #ClientSideSecurity hubs.ly/Q019Lbmq0
What #JavaScriptSecurity steps should you be following to ensure your website and customer data is protected from attack? Find out in our new blog 10 JavaScript Security Best Practices for Business Websites. #Feroot #ClientSideSecurity hubs.ly/Q019LgJd0
Is third-party code safe to use in your web frameworks? Find out! #javascriptsecurity #clientside security #frontendsecurity #FerootSecurity hubs.la/Q016z1sV0
Feroot executives share their thoughts on $11 million in seed funding to fight client-side attacks. #frontendsecurity #javascriptsecurity #JavaScriptNews #clientsidesecurity hubs.la/Q015XN600
Almost 90% of web applications were vulnerable to exploits in 2019.
#otto #JavaScript #JavaScriptSecurity #WebSecurity #Malware #eCommerce #Magecart #DataSkimming #AdTechSecurity
Facebook, Instagram, and WhatsApp all go down in an unplanned outage. No official word on what caused the outage or how long it will last.
#otto #JavaScript #JavaScriptSecurity #WebSecurity #Malware #eCommerce #Magecart #DataSkimming #AdTechSecurity
34% of organizations reported having malware in 2020.
#otto #JavaScript #JavaScriptSecurity #WebSecurity #Malware #eCommerce #Magecart #DataSkimming #AdTechSecurity
The public beta of Sboxr DOM - the Exclusive Tool for DOM Security Analysis is finally available. More details in this blog post - medium.com/sboxr/sboxr-the-d… #DOMSecurity #javascript #JavascriptSecurity #domxss #SBOXR