Cybercrime Rapper Sues Bank over Fraud Investigation

A partial selfie posted by Punchmade Dev to his Twitter account. Yes, that is a functioning handheld card skimming device, encrusted in diamonds. Underneath that are more medallions, including a diamond-studded bitcoin and payment card. In January, KrebsOnSecurity wrote about rapper Punchmade Dev...

CVE-2024-34636

creationtimestamp| type| source ---|---|--- 2024-08-07 05:15:36+00:00| seen| https://t.me/cvedetector/2651...

MAL-2024-7903 Malicious code in gdpr-cookie-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4b030241c0f342d263d8d7bb420da387e10189d78cc0201bb34cd2ac047d6764 The OpenSSF Package Analysis project identified 'gdpr-cookie-consent' @ 3.0.6 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-7900 Malicious code in @taxify/trippricing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea65d71551b4d01fb99a1bfe5236b0d5c80c0b566ae60d044b71857883f17b21 The OpenSSF Package Analysis project identified '@taxify/trippricing' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @taxify/trippricing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea65d71551b4d01fb99a1bfe5236b0d5c80c0b566ae60d044b71857883f17b21 The OpenSSF Package Analysis project identified '@taxify/trippricing' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @taxify/smartpickups (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d20e7ecf4639b1082be1a46fec756d84cc7d8fc35310af0e6af87e19879fcf7 The OpenSSF Package Analysis project identified '@taxify/smartpickups' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

Widespread IT Outage Due to CrowdStrike Update

Note: CISA will update this Alert with more information as it becomes available. Update 4:30 p.m., EDT, August 6, 2024: CrowdStrike has published its Root Cause Analysis RCA reportlink is external. According to CrowdStrike, “the full report elaborates on the information previously shared in our...

MAL-2024-7896 Malicious code in nvmfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147e71ec4a806f079f678e7df61fa161680442319b62f425a34e7e8bd87b1e85 The OpenSSF Package Analysis project identified 'nvmfix' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7894 Malicious code in httpsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e64993dc2fc1fcf09ccd51e2f05f711cd08217f3f32fe72847a0e545ab39199 The OpenSSF Package Analysis project identified 'httpsearch' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7873 Malicious code in md-progress-circular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8452da64b993f8adad40197107a47602421aecb7bc71f7b4fae5560a8429552e The OpenSSF Package Analysis project identified 'md-progress-circular' @ 100000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7872 Malicious code in @adidas-data-mesh/common-aws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ce6b2f5a21d37c95f132da06bc595d120ec7c4aed20d1d4d517a51d85db6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ASB-A-232798676

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-336490997

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

MAL-2024-7858 Malicious code in kekepaketti-git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe3fe591280b7e540d3769aca60a5a18013d4081d1fc8006f5416636354c0097 The OpenSSF Package Analysis project identified 'kekepaketti-git' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-5765

creationtimestamp| type| source ---|---|--- 2024-07-30 09:02:53+00:00| seen| https://t.me/cvedetector/1992 2024-08-27 14:23:34+00:00| published-proof-of-concept| https://t.me/codeb0ss/1572...

How Searchable Encryption Changes the Data Security Game

Searchable Encryption has long been a mystery. An oxymoron. An unattainable dream of cybersecurity professionals everywhere. Organizations know they must encrypt their most valuable, sensitive data to prevent data theft and breaches. They also understand that organizational data exists to be used...

MAL-2024-7827 Malicious code in byted-ucenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd762c1705ab2397eb3a62b846f255e15a467f1913fade5a71de9b93d916fe6 The OpenSSF Package Analysis project identified 'byted-ucenter' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in byted-ucenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd762c1705ab2397eb3a62b846f255e15a467f1913fade5a71de9b93d916fe6 The OpenSSF Package Analysis project identified 'byted-ucenter' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in nvk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0570e31c6c015817cd5fce4308786f1fe2264b4c8bb64fab755b0df9ba0c9f7 The OpenSSF Package Analysis project identified 'nvk-tools' @ 1.2.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7825 Malicious code in bb-ui-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8398af17925a65881b1e463a1cbc606615814d86f9a5bab0db801d391bf6210a The OpenSSF Package Analysis project identified 'bb-ui-tools' @ 1.2.4 npm as malicious. It is considered malicious because: - The package...