MAL-2024-972 Malicious code in internal-corp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3988d65f66ad5458f837d634b38f70d920bb0bffc57c0f5518f3ec99db298a2f The OpenSSF Package Analysis project identified 'internal-corp-package' @ 1.5.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-976 Malicious code in discord.js-commandv14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 126e742ca73d1c4cdf2ec98e46c96cef6f7c92d341e8c71305b73c0fcfdb69e9 The OpenSSF Package Analysis project identified 'discord.js-commandv14' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-23344

creationtimestamp| type| source ---|---|--- 2024-02-06 17:31:57+00:00| seen| https://t.me/ctinow/180160 2024-03-01 10:46:18+00:00| seen| https://t.me/ctinow/197488 2025-05-09 17:25:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15790...

How a $10B Enterprise Customer Drastically Increased their SaaS Security Posture with 201% ROI by Using SSPM

SaaS applications are the darlings of the software world. They enable work from anywhere, facilitate collaboration, and offer a cost-effective alternative to owning the software outright. At the same time, the very features that make SaaS apps so embraced – access from anywhere and collaboration ...

Attacks, Vulnerabilities and Actors 29 January to 4 February 2024

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of seven executed attacks, two instances of adversary activity, and six exploited...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from a security issue in the AccountActivity of the Galaxy Store applicatio...

Belarusian National Linked to BTC-e Faces 25 Years for $4 Billion Crypto Money Laundering

A 42-year-old Belarusian and Cypriot national with alleged connections to the now-defunct cryptocurrency exchange BTC-e is facing charges related to money laundering and operating an unlicensed money services business. Aliaksandr Klimenka, who was arrested in Latvia on December 21, 2023, was...

CVE-2019-18811

creationtimestamp| type| source ---|---|--- 2024-02-05 15:46:16+00:00| seen| https://t.me/ctinow/179265...

CVE-2019-8113

creationtimestamp| type| source ---|---|--- 2024-02-04 12:46:34+00:00| seen| https://t.me/ctinow/178813...

Malicious code in cifuzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7377471f095cc9fc80601acc697c994417df898d009b1cb5fa4c14ca198ae15 The OpenSSF Package Analysis project identified 'cifuzz' @ 1.2.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-970 Malicious code in discord.js-commandsv14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0552b95113f728a401629d22107eae7aa9479e0632b876f49e2558af8784f665 The OpenSSF Package Analysis project identified 'discord.js-commandsv14' @ 1.0.4 npm as malicious. It is considered malicious because: - The...

Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities

Google-owned Mandiant said it identified new malware employed by a China-nexus espionage threat actor known as UNC5221 and other threat groups during post-exploitation activity targeting Ivanti Connect Secure VPN and Policy Secure devices. This includes custom web shells such as BUSHWALK,...

ASB-A-298094386

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Identify and De-risk Unmanaged, Unauthorized Devices With Qualys CyberSecurity Asset Management (CSAM)

69% of organizations said they experienced at least one cyberattack resulting from an exploit of an unknown or unmanaged asset such as software, cloud-based workloads user accounts, and IoT devices. Ultimately, these attacks stem from visibility gaps in the attack surface. Bringing these assets...

ASB-A-230492947

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2019-8801

creationtimestamp| type| source ---|---|--- 2024-01-31 14:42:08+00:00| seen| https://t.me/ctinow/176787 2024-02-01 07:36:06+00:00| seen| https://t.me/ctinow/177340...

Italian Businesses Hit by Weaponized USBs Spreading Cryptojacking Malware

A financially motivated threat actor known as UNC4990 is leveraging weaponized USB devices as an initial infection vector to target organizations in Italy. Google-owned Mandiant said the attacks single out multiple industries, including health, transportation, construction, and logistics. "UNC499...

CVE-2023-46230

creationtimestamp| type| source ---|---|--- 2024-01-30 18:32:08+00:00| seen| https://t.me/ctinow/176156 2024-01-31 14:50:05+00:00| seen| https://t.me/truesecator/5358 2024-02-22 09:36:57+00:00| seen| https://t.me/ctinow/190562...

CVE-2023-42866

creationtimestamp| type| source ---|---|--- 2024-01-30 09:11:09+00:00| seen| https://t.me/ctinow/175766 2024-01-30 09:11:10+00:00| seen| https://t.me/ctinow/175767 2024-01-30 09:11:12+00:00| seen| https://t.me/ctinow/175768...

CVE-2019-8787

creationtimestamp| type| source ---|---|--- 2024-01-29 19:51:40+00:00| seen| https://t.me/ctinow/175499 2024-01-31 08:41:41+00:00| seen| https://t.me/ctinow/176545 2024-01-31 10:36:51+00:00| seen| https://t.me/ctinow/176631 2024-01-31 12:37:17+00:00| seen| https://t.me/ctinow/176700...