Web Security

Fake web stores are fraudulent websites created by threat actors to mislead consumers into providing "personal information" and making purchases for "non-existent products." These sites often mimic the appearance of legitimate retailers, making them difficult to identify. HUMAN's Satori Threat...

WebRTC (Web Real-Time Communication) is an open-source project that facilitates real-time audio, video, and data sharing directly between web browsers and mobile applications without the need for plugins. Its integration into HTML5 and support across major browsers make it a...

A CI/CD pipeline is a series of automated steps that helps software teams deliver code faster, safer, and more reliably.  It coordinates all the processes involved in continuous integration (CI) and continuous delivery (CD). The CTO of Razz Security, Mukesh,...

Malicious Chrome extensions pose significant risks to users, as they can compromise personal information, inject unwanted promotions, and even manipulate web traffic as well. There are several malicious extensions that remain undetected for extended periods, and this primarily happens due...

As of January 2024, over 302 million SSL certificates had been issued online. Secure Sockets Layer (SSL) is a security protocol which authenticates and encrypts information passed between web servers and browsers. An SSL certificate provides added protection to...

Okta Browser Plugin is available on multiple browsers like Edge, Chrome, Safari, and Firefox. Combining all these browsers, the plugin has over 5 million users. However, this plugin was discovered to have a Cross-site Scripting vulnerability that could allow threat...

Since the Swap file stores data that the system's RAM cannot hold, these contents often contain critical data like passwords, encryption keys, and session data, due to which hackers often target Swap files. So, hackers can access and extract essential...

Researchers identified a new variant of credit card skimming attack, the Caesar Cipher Skimmer, targeting multiple content management systems (CMS), including WordPress, Magento, and OpenCart.  The skimmer specifically targets the checkout process, injecting malicious code into the checkout PHP file,...

MSP leaders are advised to save the date for June 27. In a special session, called “3 Security Trends to Maximize MSP Growth” and hosted by Cynet, deeply experienced security experts will unpack insights managed service providers can leverage...

Hackers use JavaScript frameworks since they offer a wide range of functionalities and tools that could be used to bypass detection, hide code, and carry out harmful acts. In addition, they take advantage of the people's trust in such popular...