XSS Hunter, a popular tool for detecting cross-site scripting (XSS) bugs on sites, now belongs to Truffle Security who have launched a new version with enhanced security features. Given that XSS is a frequent vulnerability (about 23% of the bug reports submitted to bug bounty platform HackerOne), the tool’s modifications should mitigate its previous data leakage risks. The new version also supports detection of other vulnerabilities like cross-origin resource sharing (CORS) misconfigurations and scans for source code leaks.

SEO Manipulation Alert: Chinese Hackers Exploit IIS Vulnerabilities with BadIIS Malware!
A large-scale cyberattack identified in 2024, known as “BadIIS”, targets IIS servers worldwide, particularly in Asia. Cybercriminals install the malware to manipulate website content and