Everything Threat Times has reported about web security: 8 stories, newest first. Part of our Vulnerabilities coverage.
Security firm Sucuri explains that browser padlocks indicate transport security only, urging site owners to manage keys properly and understand encryption limits.
Wordfence Intelligence published its weekly vulnerability digest covering disclosures from September 28 through October 4, 2026, for WordPress administrators.
Hundreds of popular video games have been decompiled and ported to run directly in web browsers using AI tools, according to a report by Kotaku.
Security researchers have published a new technique that bypasses token length limits by splitting data into overlapping fragments for CSS-based exfiltration.
A security researcher has demonstrated a novel method to invoke JavaScript functions by overwriting Error.prepareStackTrace, bypassing traditional syntax restrictions.
Proper output encoding neutralizes injected scripts by forcing the browser to treat malicious characters as inert text rather than executable code instructions.
Insecure deserialization often manifests as subtle state anomalies or unexpected object behaviors rather than immediate crashes, hiding critical access control failures within routine data processing.
The free certificate authority is shortening validity periods significantly, effective February 2027, impacting automated issuance systems.