Trick users and bypass warnings – Modern SVG Clickjacking attacks(lyra.horse)

314 points by spartanatreyu 10 months ago | 45 comments

Aspects of modern HTML/CSS you may not be familiar with(lyra.horse)

391 points by todsacerdoti 1 year ago | 221 comments

A blog post on lyra's blog arguing that modern HTML and CSS features can replace much of what JavaScript frameworks are used for on the web.

The RCE that AMD won't fix(mrbruh.com)

343 points by MrBruh 8 months ago | 144 comments

Blog post describing a remote code execution vulnerability found by decompiling AMD's AutoUpdate software, which AMD declined to fix.

Taking over 60k spyware user accounts with SQL injection(ericdaigle.ca)

221 points by mtlynch 1 year ago | 64 comments

GitHub Spam(djanes.xyz)

120 points by bl4ckneon 2 years ago | 69 comments

Ghrc.io appears to be malicious(bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.