Website hijack campaign now impacting 150,000 sites

Skull and crossed swords synonymous with piracy as a sophisticated website hijack campaign initially detected in February has seen a dramatic escalation, with security analysts now estimating that approximately 150,000 websites have been compromised.

A sophisticated website hijack campaign initially detected in February has seen a dramatic escalation, with security analysts now estimating that approximately 150,000 websites have been compromised.

The initial discovery flagged over 35,000 targeted websites. Himanshu Anand, a software engineer and security analyst at c/side, has continued to monitor the threat actor's activities and uncovered new tactics and techniques employed in this expanding operation.

What's new in...

Web framework Svelte delivers ‘most significant release’ yet

Svelte logo as the team releases Svelte 5 of the web development framework that brings native TypeScript support in addition to existing languages like HTML, CSS, and JavaScript, plus a rank of new features and improvements for developers.

Svelte 5 has been released, marking what the team behind the web framework describes as the “most significant release in the project's history" and follows 18 months of intensive development.

The latest iteration of the web framework arrives as a ground-up rewrite, promising improved performance, reduced bundle sizes, and enhanced reliability. Despite these substantial changes, the framework maintains near-complete backwards compatibility with Svelte 4, ensuring a seamless...

SQL, Python, and Java most sought-after skills

SQL, Python, and Java remain the most sought-after programming skills by employers, according to new research from System Design School. The study analysed job listings on Glassdoor, revealing the languages most frequently cited as required skills.

"In today's competitive job market, having the right skills is more important than ever, and this data provides clear evidence of the programming languages employers are seeking,” commented Sheldon Chi, ex-Google engineer and creator...

Copilot X heralds a new era of AI-powered coding

GitHub has unveiled Copilot X, an upgraded version of its AI-powered coding assistance tool.

Copilot X adopts OpenAI’s latest GPT-4 model and now features chat and voice interfaces, support for pull requests, command-line support, and can generate answer questions from documentation:

https://twitter.com/marktenenholtz/status/1638549603753795584

Unlike traditional coding assistance tools that rely on simple code templates or pre-defined snippets, Copilot X uses...

Apple is giving iOS apps which handle real cash in an HTML5 wrapper a bit longer to transition to native

Apple is giving iOS developers whose apps use HTML5 containers and deal with real cash, six months longer to make them fully-native.

The new rules were first announced on June 3rd. Here’s what the guidelines said:

“HTML5 games distributed in apps may not provide access to real money gaming, lotteries, or charitable donations, and may not support digital commerce.

This functionality is only appropriate for...

W3C and WHATWG come together for HTML and DOM specifications

The World Wide Web Consortium (W3C) and the Web Hypertext Application Technology Working Group (WHATWG) will collaborate on developing a single version of the HTML and DOM specifications – in a move which may help bring the two factions closer together.

The memorandum of understanding means both parties will endeavour to pursue the following path:

W3C and WHATWG will work together on HTML and...

Adopted or abandoned: Microsoft details Chromium-based Edge features

Microsoft has provided details of what features are being adopted or abandoned from Chromium for its Edge browser reincarnation.

Last year, Microsoft announced it would be scrapping development of its EdgeHTML engine (a decision criticised by some) and switching to Chromium for its Edge browser.

In providing reasons why it made the switch, Microsoft cites better web compatibility for users, less fragmentation for developers, and the ability to ‘join forces to evolve the...

Google will revise ad blocker-killing Chromium proposal

Google has decided to revise its proposed Chromium update that would have killed ad blockers and some other extensions.

The proposal, to restrict Chromium's script blocking capabilities to the new DeclarativeNetRequest API instead of the old webRequest API, caused a backlash from extension developers and users.

Chromium engineer Devlin Cronin provided an update on Google Groups following the outcry:

“I’d like to reiterate that...

Microsoft Staffer: Mozilla, give up and switch to Chromium too

A staffer for Microsoft has said Mozilla should follow his employer’s decision to switch from its own rendering engine to Chromium.

Microsoft recently announced it’s halting development of its EdgeHTML rendering engine and switching its Edge browser to Google’s Chromium this year.

Privacy advocates Mozilla shared their concerns about Microsoft’s decision.

In a blog post, Mozilla CEO Chris Beard wrote:

"The...

Chrome update to kill ad blockers will affect other plugins

An update to Chrome which appears intended to kill the use of ad block plugins will impact extensions in other categories.

The change would restrict Chrome's script blocking capabilities to the new DeclarativeNetRequest API instead of the old webRequest API.

Raymond Hill, Author of the uBlock Origin and uMatrix ad blockers, said in a bug report:

“If this (quite limited) declarativeNetRequest API ends up being the only way content...