Whenever I'm working on a target, one of my fixed test-cases is to inspect the site's JavaScript files. Why? Because libraries often contain vulnerable versions — finding a JS file that references an ...
As recently as Wednesday afternoon, a U.S. government website was hosting a malicious JavaScript downloader that led victims to installations of Cerber ransomware. The malware link has since been ...