WordPress administrators are being urged to patch a high-severity core vulnerability that can turn an anonymous comment into ...

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

IntroductionUntil now, I have been prototyping a 'Shogi Coach AI' that takes the 'best move, evaluation value, and principal ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...

An active exploitation campaign targeting FortiGate firewalls, in which attackers weaponize a critical vulnerability to plant a custom-built Node.js remote access trojan (RAT) capable of turning ...

Attackers abuse Node.js to execute malicious scripts and deploy payloads in attacks targeting governments, technology companies, and hotels.