Aptori Now on Google Cloud Marketplace for AI-Powered Security and Automated Risk Remediation

San Jose, United States / California, 12th March 2025, CyberNewsWire...

CVE-2025-2129

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

Pentesters: Is AI Coming for Your Role?

We've been hearing the same story for years: AI is coming for your job. In fact, in 2017, McKinsey printed a report, Jobs Lost, Jobs Gained: Workforce Transitions in a Time of Automation , predicting that by 2030, 375 million workers would need to find new jobs or risk being displaced by AI and...

Malicious code in cryptocom-ai-agent-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b95f332dde178bf7e9fd99a6d8dd252a590ca10ecdb653ab105c5fe1e6b796 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2305 Malicious code in cryptocom-ai-agent-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b95f332dde178bf7e9fd99a6d8dd252a590ca10ecdb653ab105c5fe1e6b796 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rexz-imagine-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5880974c43ddaa1e24f3eecce7e9eb1e66d31adb347a095436a27316c30097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2278 Malicious code in rexz-imagine-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5880974c43ddaa1e24f3eecce7e9eb1e66d31adb347a095436a27316c30097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-verify-shared-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88a03bc9be981617ba8a71b55e2c7051d9cdf7397638bc7ec35ad84c17c455b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2237 Malicious code in ai-verify-shared-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88a03bc9be981617ba8a71b55e2c7051d9cdf7397638bc7ec35ad84c17c455b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Helping us help you: Practical applications of AI in the SOC

Security teams can be understandably hesitant to integrate artificial intelligence AI into incident response workflows. A single mistaken action could lead to widespread disruption, monetary loss, or reputational harm. Meanwhile, attackers are increasingly leveraging AI to enhance the scale and...

AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution

In this blog entry, we uncovered a campaign that uses fake GitHub repositories to distribute SmartLoader, which is then used to deliver Lumma Stealer and other malicious payloads. The campaign leverages GitHub’s trusted reputation to evade detection, using AI-generated content to make fake...

Important: Red Hat Security Advisory: RHOAI 2.18.0 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 2.18.0 provides these changes:...

CVE-2025-2129

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

CVE-2025-2129 Mage AI insecure default initialization of resource

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

CVE-2025-2129 Mage AI insecure default initialization of resource

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

CVE-2025-2129

Mage AI 0.9.75 is associated with an insecure default initialization of a resource (insecure default authentication setup) that could enable a remote attack. Documents describe a network-vector, high attack complexity, and partial confidentiality/integrity/availability impact. The exploitability ...

PT-2025-10456

Name of the Vulnerable Software and Affected Versions: Mage AI version 0.9.75 Description: A vulnerability was found in Mage AI, which has been classified as problematic. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The...

Mage AI 安全漏洞

Mage AI is a Mage open source intelligent program for building, running and managing data pipelines. A security vulnerability exists in Mage AI version 0.9.75 that stems from insecure resource initialization...

Key Takeaways from the 2025 State of AI in the Cloud Report

From DeepSeek adoption to impact on security and governance...

Malicious code in auth0-ai-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d91c2333523a3496974b09552ff384b980de11cce7d7cf13b342b5f6351b77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...