Follow @ma1 for latest news about NoScript and web browser security. Use NoScript to protect yourself against malicious web content. https://xitter.cf/t.co/OSDx439jxJ

Joined March 2009
.@OpenTechFund's Security Lab partner @SecReLabs recently audited @noscript to ensure it offers users the best possible security. Learn more: ow.ly/Qz5Z50ZSraJ
2
1
3
410
The top @noscript banner looks like a solid start.
Je lance l’initiative Exit Chat Control. exitchatcontrol.org/ Ce site est un guide complet qui vise à répertorier tous les outils nécessaires pour contourner tout système de surveillance de vos messageries privées. Le site est open source et sera amélioré en continu.
1
2
203
I thought it was the usual DDOS spidering fuckery by Bytedance (TikTok) putting @noscript's support forums on their knees, but... APPLE ENGINEERING, WTF?!!! "Ambassador" Tim Cook, his new CEO & their minions embracing the dark side really hard 🪱🍏
2
2
286
And that's why the dependencies of @noscript + NoScript Commons Library amount to a grand total of 5 self contained, vendored source files.
There is a project on GitHub called Axios. Axios is extremely popular. It is used by millions upon millions of applications. Axios is a programming library that helps your JavaScript code make HTTP/S requests (communicate with websites). In simple terms, if you're a programmer doing something with JavaScript, and want to do stuff that communicates with a website in literally any capacity, people heavily recommend using Axios due to its simplicity. Using Axios you don't have to reinvent the wheel and do a bunch of work. All you need to do is import Axios into your code and you're off to the races. Someone (currently unknown) compromised Axios (currently unknown how) to deliver malware to people. When someone updates or installs Axios, Axios itself contains malware. What the malware does is (currently) unknown, but it is being reversed engineered by probably every malware analyst on the planet at this moment. In a few hours more details will emerge. Information is being exchanged in real time on social media and private communication platforms as I write this. Due to the size and popularity of Axios, it is unknown how many are impacted, it could be millions, it could be thousands, or if we're lucky, only hundreds of people or organizations will be impacted. If this is absolute worst case scenario, millions of organizations across the planet have been infected with malware which (currently) we do not understand. However, the likelihood of this is low. It appears Axios being compromised was detected quickly, potentially within minutes (or hours) of it being compromised to deliver malware. Additionally, the likelihood of every single Axios user updating Axios as soon as it was compromised to deliver malware is astronomically low. It is basically zero. The impact from Axios being compromised is devastating, the fallout from this will be a massive headache. This is unironically a malware nuclear missile and will likely be studied in the future.
3
5
370
The quick @firefox jumps over the lazy laptop.
1
2
121
Both disturbing and bizarre. Why is an administration that says it supports open-weight models and real competition in AI deleting government materials that support its position?
21
277
8
1,661
99,752
🚨 Double your impact 🚨 Although the modern internet has been corrupted by rampant privacy violations and pervasive government spying, we have the power to FREE THE INTERNET from the chains of censorship and surveillance. ⛓️‍💥 Donate today to take advantage of our match offered by Power Up Privacy and support a free internet. This means a $25 donation will have a $50 impact. torproject.org/donate/donate…
6
21
1
96
8,600
Based on reports up to September 2025: Chrome: 6 zero-days exploited (e.g., CVE-2025-10585, per The Hacker News, SocPrime, and Google updates). Firefox: 3 zero-days exploited (CVE-2025-2857, CVE-2025-4918, CVE-2025-4919, per Bleeping Computer, The Hacker News, and Mozilla advisories). NoScript can help mitigate unknown vulnerabilities by blocking JavaScript execution, a common exploit vector (per NoScript docs and security analyses).
2
4
263
🔥#chrome #0day actively exploited in the wild. 🦊 Switch to @firefox 🚫 use @noscript 📲 On Android, too #zerodayattack #zerodayexploit #security
🚨 CISA Warns of Google Chrome 0-Day Vulnerability Exploited in Attacks Read more: cybersecuritynews.com/cisa-g… CISA has issued a warning about a high-severity zero-day vulnerability in Google Chrome that is being actively exploited in attacks. The vulnerability, tracked as CVE-2025-10585, has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog, signaling an urgent need for users and administrators to take action. #cybersecuritynews #Vulnerability
1
2
406
Since you mentioned @mullvadnet, their Mullvad Browser should be on top of the list: no Google/Chromium/fascist shit, just privacy and security in mind, VPN-optimzed, made by the @torproject 🧅 from a stripped down and hardened @firefox 🦊, with integrated uBlock & @noscript 🚫
1
3
399
📯PSA to Win 7/8 and macOS 10.x @torproject browser users: ☠️LEGACY CHANNEL EOL☠️ Tor Browser 13.5.21 is based on the last 115.x ESR version officially announced by @mozilla, thus we can't guarantee further 13.5.x updates. Please upgrade to 14.5.x ASAP! blog.torproject.org/new-rele…
4
16
6,535
We're always looking for more great people to join the Tor Project team. Right now, we're seeking values-driven leaders and specialists to help shape our future. Join us in building a stronger organization: - 👥 Director of People and HR - 🔧 Senior Director for Internal Structures and Support - 📊 Nonprofit Accounting Specialist (Part-time) Whether you're passionate about culture, strategy, or numbers, there’s a role for you here. torproject.org/about/jobs/
20
51
10,347
Replying to @nikitabier
1
1
138
The EU's Chat Control vote is scheduled for October 14, 2025. The EU plans to scan all information sent via messaging apps. Only three EU member states—Austria, Netherlands, and Poland—have announced opposition.
398
1,884
534
17,592
717,665
Sensible signage spotted at @mullvadnet headquarters 💜🚫 @noscript #noscript #security #privacy
1
2
229
thank you for noticing it. @noscript's 20th birthday is tomorrow the 13th, and I'm scrambling to release version 13 this week as a celebration 🍾 – at Palermo, Sicily
1
4
8
225
🦊 Firefox 136 introduces new features like an improved sidebar, vertical tabs, enhanced privacy controls, and improved energy efficiency for macOS. It supports hardware video decoding on Linux AMD GPUs and is now available on Linux ARM64. alternativeto.net/news/2025/…
21
18
5
139
8,204