Eight innovative tools that are reimagining web applications and how we build them. Welcome to the Great Unbloating.

Six Proto6 flaws in protobuf.js enable RCE and DoS attacks; patched in versions 7.5.6 and 8.0.2 to protect Node.js services.

SVG phishing email attacks are bypassing enterprise email security gateways by hiding JavaScript inside image files and ...

FROST uses JavaScript and OPFS SSD timing to identify websites at 88.95% F1, exposing cross-browser privacy leaks.

Cloudflare Inc. today said it has acquired VoidZero Inc., the open-source company behind Vite and the widely used JavaScript ...

Cloudflare, Inc. (NYSE: NET), the leading connectivity cloud company, today announced it has acquired VoidZero, the open ...

Google has shared the results of the latest Chrome performance benchmarks, including record scores on tests running on an M5 ...

I built the test company in about 10 hours and the app itself in roughly 30—all through conversation with an AI, no ...

The record-breaking autonomous offensive security company extends its full-stack testing to include AI systems, covering web, ...

Now sites have a new way to spy on their visitors: measuring subtle interactions with their solid-state drives. The technique ...

CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization attacks.

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day ...