Three popular plugins served malicious JavaScript through a compromised CDN.

In a supply chain attack, attackers install backdoors through the WordPress plugins OptinMonster, TrustPulse, and PushEngage.

We are looking for contributors. Please check open issues in the above repos if you think you could help, or open a new one if you have an idea you'd like to discuss. jsDelivr is a free CDN for ...

Cloudflare is one of the premier content delivery networks (CDNs) in the world. It provides a gamut of cloud-based solutions for website owners and network administrators. This includes distributed ...

Claims, counterclaims, website shutdowns, redirections and DDoS attacks were among the highlights (or lowlights) as news of the Polyfill supply chain attack entered its second day. After Polyfill(.)io ...

Tech giant Toshiba and mega-retailer Muji warned visitors that suspicious sign-in screens popping up on their websites could collect credentials. The recent large scale supply chain attack conducted ...