The Safari browser in Apple's iOS 6 platform has a potentially serious JavaScript bug that could have major security and privacy implications.

PayPal has resolved a reflected cross-site scripting (XSS) vulnerability found in the currency converter feature of user wallets.

The latest JavaScript specification standardizes a well-balanced and thoughtful set of features, including the built-in global Iterator, new Set methods, improvements to regular expressions, and more.