Noma LabsがClaude Code DesktopのHTMLプレビュー脆弱性「SneakPeek」を公表。256KB超のHTML表示からSSH秘密鍵やAWS認証情報、APIキーを読み取れる問題を実証した。AnthropicはCVSS ...

メシウス株式会社（旧社名：グレープシティ株式会社）は、WebアプリケーションでMicrosoft ExcelライクなUIと機能性を実現するJavaScriptライブラリ「SpreadJS」の新版として、「V19.2J」を10月29日にリリースする。

Your first check should not be ChatGPT, Copilot, Claude Code, or another model. Build analytics, AI, and leadership skills.

The tool's HTML preview mechanism had a flaw allowing malicious JavaScript to access local files and exfiltrate cloud ...

I tested REA, GitHub's viral reverse engineering tool, on a 100 MB Electron app. Here's where its static analysis impressed ...

Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...

A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript ...

A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In ...

ESET uncovered new Ghostwriter (aka FrostyNeighbor) activity targeting Ukrainian government organizations in a campaign active since March 2026. ESET researchers published a new report documenting ...

The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine. Active since at least 2016, Ghostwriter has been ...