⤷ Title: Hospitality Malware Campaign Deploys Node.js Implant
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 08:15:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #hospitality #malware #nodejs #phishing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 08:15:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #hospitality #malware #nodejs #phishing
Daily CyberSecurity
Hospitality Malware Campaign Deploys Node.js Implant
At a glance Actor: Unknown threat actor Activity type: Phishing and multi-stage intrusion Targets: Hospitality and hotel industry (Europe and Asia) Scale: Unspecified number of impacted organizati…
⤷ Title: How to Apply OWASP ASVS in Your Code, A Developer’s Verification Checklist
════════════════════════
𐀪 Author: FOLAKE SOWONOYE
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 11:36:27 GMT
════════════════════════
⌗ Tags: #web_development #secure_coding #application_security #owasp #nodejs
════════════════════════
𐀪 Author: FOLAKE SOWONOYE
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 11:36:27 GMT
════════════════════════
⌗ Tags: #web_development #secure_coding #application_security #owasp #nodejs
Medium
How to Apply OWASP ASVS in Your Code, A Developer’s Verification Checklist
Mapping of OWASP ASVS requirements for auth, injection, CORS, business logic, request smuggling to real Express/Node examples, plus how to…
⤷ Title: Master Node.js & npm: A Python Dev - Security Researcher Guide
════════════════════════
𐀪 Author: Bharath
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 18:17:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #bug_bounty #javascript #nodejs
════════════════════════
𐀪 Author: Bharath
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 18:17:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #bug_bounty #javascript #nodejs
Medium
The Big Picture: Node.js, npm, and the JavaScript Runtime - A Security Researcher’s Guide to the JavaScript Ecosystem (Python Dev…
The Javascript ecosystem explained through Python. Learn how runtime, package manager and event loop impacts modern web security
⤷ Title: Reviving a Legacy App, and Immediately Breaking It On Purpose
════════════════════════
𐀪 Author: Gertrude Nabasirye
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 16:48:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #nodejs #devsecops #application_security #privilege_escalation
════════════════════════
𐀪 Author: Gertrude Nabasirye
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 16:48:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #nodejs #devsecops #application_security #privilege_escalation
Medium
Reviving a Legacy App, and Immediately Breaking It On Purpose
Part 1 of my AppSec transformation series — auditing, exploiting, and rebuilding a 2022 inventory system from the ground up.
⤷ Title: Why We Hash Passwords Instead of Encrypting Them: A Node.js Guide to bcrypt, Argon2id, and PCI DSS
════════════════════════
𐀪 Author: FOLAKE SOWONOYE
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 12:54:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #javascript #passwords #nodejs
════════════════════════
𐀪 Author: FOLAKE SOWONOYE
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 12:54:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #javascript #passwords #nodejs
Medium
Why We Hash Passwords Instead of Encrypting Them: A Node.js Guide to bcrypt, Argon2id, and PCI DSS
A breakdown of hashing versus encryption for developers who store customer passwords, with working TypeScript examples using bcrypt…
⤷ Title: I built a free CLI tool that finds shadow API routes — here’s what it found in Ghost CMS
════════════════════════
𐀪 Author: Ubaid Ur Rehman
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 17:52:24 GMT
════════════════════════
⌗ Tags: #open_source #devops #javascript #nodejs #api_security
════════════════════════
𐀪 Author: Ubaid Ur Rehman
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 17:52:24 GMT
════════════════════════
⌗ Tags: #open_source #devops #javascript #nodejs #api_security
⤷ Title: Node.js Backdoor Hides Its C2 on the TON Blockchain
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 00:10:15 +0000
════════════════════════
⌗ Tags: #Malware #EtherHiding #LevelBlue #LNK malware #NodeJS Backdoor #phishing #TON Blockchain #TonRAT
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 00:10:15 +0000
════════════════════════
⌗ Tags: #Malware #EtherHiding #LevelBlue #LNK malware #NodeJS Backdoor #phishing #TON Blockchain #TonRAT
Daily CyberSecurity
Node.js Backdoor Hides Its C2 on the TON Blockchain
At a glance Malware family Node.js backdoor (tracked as “TonRAT” by some researchers) Threat actor Unattributed; no named group Target / victims Hospitality sector; hotel staff Deliver…
⤷ Title: Node.js Patches 11 Vulnerabilities in July 2026 Security Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 15:29:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_56846 #CVE_2026_56848 #CVE_2026_58043 #HTTP/2 #Node.js Security #nodejs #use after free
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 15:29:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_56846 #CVE_2026_56848 #CVE_2026_58043 #HTTP/2 #Node.js Security #nodejs #use after free
Daily CyberSecurity
Node.js Patches 11 Vulnerabilities in July 2026 Security Release
TL;DR Node.js shipped fixes for 11 vulnerabilities on 29 July 2026. Three are rated high severity, and the rest are medium or low. The updates cover the 26.x, 24.x, and 22.x release lines. No in-t…
⤷ Title: tryhackme — do not disturb — day 07
════════════════════════
𐀪 Author: Nanashi Bx2
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 05:27:18 GMT
════════════════════════
⌗ Tags: #boot2root #cybersecurity #nodejs #info_sec_writeups #tryhackme
════════════════════════
𐀪 Author: Nanashi Bx2
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 05:27:18 GMT
════════════════════════
⌗ Tags: #boot2root #cybersecurity #nodejs #info_sec_writeups #tryhackme
Medium
tryhackme — do not disturb — day 07
Room: Do Not Disturb (https://tryhackme.com/room/hh-donotdisturb-84a45644) Platform: TryHackMe Difficulty: Medium Category: Boot2Root /…
⤷ Title: Your Auth Middleware Is Too Late. Here’s What Should Run Before It.
════════════════════════
𐀪 Author: Yoosuf Husain
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 13:51:35 GMT
════════════════════════
⌗ Tags: #backend_development #api_security #engineering #nodejs #software_architecture
════════════════════════
𐀪 Author: Yoosuf Husain
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 13:51:35 GMT
════════════════════════
⌗ Tags: #backend_development #api_security #engineering #nodejs #software_architecture
Medium
Your Auth Middleware Is Too Late. Here’s What Should Run Before It.
Most Node.js apps have an auth middleware. You write a protect function, drop it on your routes and call it done. That works fine until you…