Autor: Jaroslava Pokorná

A malvertising operation dubbed SourTrade is making victims‘ browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL. Confiant, which detailed the campaign on July 23, 2026, said it has operated since late 2024 and impersonated TradingView, Solana, and…

Read More “Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable” »

Společnosti Paramount Skydance a Warner Bros. Discovery se zavázaly, že plánované spojení zatím nedokončí. Odklad může platit až do 1. června 2027. Firmy během této doby nesmějí ani začít propojovat své provozy. Zde je zdroj

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. […]

Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion emails demanding $2,000 in Bitcoin. […]

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain…

Read More “Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available” »