Yellow.ai's customer service chatbot had a major security flaw that enabled cookie theft and account hijacking. The issue has ...

Configuration oversights can still be leveraged in attacks - despite costly WAFs protecting the infrastructure.

Cross-site scripting, often abbreviated XSS, is a class of Web security issues. A recent research report stated that XSS is now the top security risk. In a typical XSS scenario, a Web page might use ...

[Masato Kinugawa] found a series of bugs that, when strung together, allowed remote code execution in the Discord desktop app. Discord’s desktop application is an Electron powered app, meaning it’s a ...