A Graph-Based Approach to Alert Contextualisation in Security Operations Centres

Interpreting the massive volume of security alerts is a significant challenge in Security Operations Centres SOCs. Effective contextualisation is important, enabling quick distinction between genuine threats and benign activity to prioritise what needs further analysis.This paper proposes a...

CVE-2025-43295

creationtimestamp| type| source ---|---|--- 2025-09-15 22:44:30+00:00| seen| Telegram/dCqEynpwtr-y3I3ArdM10a2EZwz9RT5XZs7AQ3thZ3o9VYg...

Malicious code in consolergbcolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 04beefffad3b4018eda21173a10a1dbebd8127bd9870d86e31894c6be592e107 If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

CVE-2025-59328

creationtimestamp| type| source ---|---|--- 2025-09-15 12:21:27+00:00| seen| https://seclists.org/oss-sec/2025/q3/167 2025-09-15 14:32:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lyuzjwdl7c2o 2025-09-15 17:16:56+00:00| seen|...

Malicious Package

Overview dev.voltstro.nativearrayspanextensions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview basic-validator-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

ECHO-21E1-980C-98E3 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

ECHO-0245-A372-7F9E Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

Malicious Package

Overview mcp-chat-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-40687

creationtimestamp| type| source ---|---|--- 2025-09-11 12:36:18+00:00| seen| https://gist.github.com/Darkcrai86/b3420dd55f54cfd5f86a60bf88777fd9 2025-09-12 09:01:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lymvnh4wot2w...

CVE-2025-48040

creationtimestamp| type| source ---|---|--- 2025-09-11 11:17:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lykmrkwzlv2c...

Malicious Package

Overview @self-sell/self-sell-amplitude-events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview @js-to-lua/handler-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2525-55234

creationtimestamp| type| source ---|---|--- 2025-09-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1634...

CVE-2025-59044

creationtimestamp| type| source ---|---|--- 2025-09-10 02:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh5wurhik2h...

PT-2025-37084

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks affected versions not specified Description: The vulnerability involves the cleartext exposure of service account passwords. It is a medium-severity issue. Recommendations: At the moment, there is no information about a new...

PT-2025-37083

Name of the Vulnerable Software and Affected Versions: Cortex XDR Microsoft 365 Defender Pack affected versions not specified Description: The Cortex XDR Microsoft 365 Defender Pack may allow cleartext exposure of credentials. The severity of this issue is low. Recommendations: At the moment, the...

CVE-2025-55047

creationtimestamp| type| source ---|---|--- 2025-09-09 21:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lygnu3zloo2t...

CVE-2025-7453

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:39+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

GHSA-3VCP-R62V-XPVG Apache DolphinScheduler vulnerable to Alert Script Attack

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...