CVE-2025-31125

creationtimestamp| type| source ---|---|--- 2025-03-31 10:12:27+00:00| published-proof-of-concept| https://github.com/vitejs/vite/security/advisories/GHSA-4r4m-qw57-chr8 2025-03-31 17:30:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9702 2025-03-31 21:43:14+00:00|...

MAL-2025-2604 Malicious code in tree-sitter-erlang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 712279ef7d69026b60fa7e5d9007249ac05502576b2a1164da1dbafca2be44f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rapid7 MDR Supports AWS GuardDuty's New Attack Sequence Alerts

Co-authored by Yaron Kaplan and Gil Shamgar. AWS GuardDuty has introduced two powerful new alerts that enhance its threat detection capabilities: "Potential Credential Compromise" and "Potential S3 Data Compromise." These alerts go beyond traditional threat detection by focusing on attack...

MAL-2025-2601 Malicious code in bsb-family-pack2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 3c8e5ce70508c90e2093517061f924980b3f870682878633d12afdf9903b6ecf This package is designed to exfiltrate sensitive user data, including SMS messages, contacts, call logs, and files, to a remote server via...

MAL-2025-2348 Malicious code in k8s-deploy-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c86c15f129692c3b73b16951c9f12754789e3a5ea36e3e5d517e05c7e0231b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-20903

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

Unmasking the new persistent attacks on Japan

Cisco Talos discovered malicious activities conducted by an unknown attacker since as early as January 2025, predominantly targeting organizations in Japan. The attacker has exploited the vulnerability CVE-2024-4577, a remote code execution RCE flaw in the PHP-CGI implementation of PHP on Windows...

CVE-2025-20903

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2025-20903

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2025-20903

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2025-20903

CVE-2025-20903 describes an improper access control flaw in Samsung’s SecSettingsIntelligence prior to the SMR March-2025 Release 1. The issue allows local attackers to perform privileged activities, with user interaction required to trigger the vulnerability. The CVSS 3.1 vector indicates local ...

CVE-2025-20903: Undefined Security Weakness

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

Silk Typhoon targeting IT supply chain

Executive summary: Microsoft Threat Intelligence identified a shift in tactics by Silk Typhoon, a Chinese espionage group, now targeting common IT solutions like remote management tools and cloud applications to gain initial access. While they haven't been observed directly targeting Microsoft...

Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool

In recent months, we've seen an increase in the use of Windows Packet Divert drivers to intercept and modify network traffic in Windows systems. This technology is used in various utilities, including ones for bypassing blocks and restrictions of access to resources worldwide. Over the past six...

CVE-2025-1937

creationtimestamp| type| source ---|---|--- 2025-03-04 15:50:44+00:00| seen| https://t.me/cvedetector/19505 2025-03-10 13:59:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ljzpksc4qi2v 2025-03-10 23:49:37+00:00| seen|...

MAL-2025-1676 Malicious code in zohodeskportalsdksampleappsreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46d46cb1be5475917e2e2ec917b43cb05d3a0382d2fc6b288f7fc02089399be5 The OpenSSF Package Analysis project identified 'zohodeskportalsdksampleappsreactnative' @ 5.1.0 npm as malicious. It is considered malicious...

Improper Access Control

moodle/moodle is vulnerable to Improper access control. The vulnerability is due to missing Separate Groups mode restrictions in permission checks, allowing unauthorized viewing or deletion of responses in Feedback activities...

CVE-2025-26526

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities...

CVE-2025-26526

CVE-2025-26526 affects Moodle: Separate Groups mode restrictions were not factored into permission checks when viewing or deleting Feedback activity responses. Root cause: permission checks for viewing/deleting Feedback responses fail to account for grouping, enabling improper access or deletion ...

⚡ THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apple's Data Dilemma

Welcome to your weekly roundup of cyber news, where every headline gives you a peek into the world of online battles. This week, we look at a huge crypto theft, reveal some sneaky AI scam tricks, and discuss big changes in data protection. Let these stories spark your interest and help you...