Malicious code in bittensor-burn-alert (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e89dc9ff0a5d334b67a01c572c036b0740adf6d8669d2fa25c241a0c098116 The package advertises itself as a Bittensor subnet burn-rate monitor but bundles a covert clipboard surveillance daemon in its compiled core module...

PYSEC-2026-61

creationtimestamp| type| source ---|---|--- 2026-06-08 15:11:10+00:00| seen| https://gist.github.com/alon710/56fac469b83d68f32bede1d2945e0063...

AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload

Phishing has always been a numbers game. AI has turned it into a volume machine. Attackers can now create convincing emails, fake login pages, and tailored lures in minutes. Every polished message adds another case for Tier 1 to review, another link to inspect, and another alert that cannot be...

CVE-2026-11474

creationtimestamp| type| source ---|---|--- 2026-06-07 16:16:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-11474 2026-06-08 01:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnqjubp7pt2l 2026-06-08 01:30:41+00:00| seen|...

CVE-2026-11471

creationtimestamp| type| source ---|---|--- 2026-06-07 16:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-11471 2026-06-08 05:00:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqvlzouha2y...

CVE-2026-11470

creationtimestamp| type| source ---|---|--- 2026-06-07 16:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-11470...

CVE-2026-49494

creationtimestamp| type| source ---|---|--- 2026-06-07 04:16:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-49494 2026-06-07 12:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnp6tprsqw25 2026-06-07 13:24:19+00:00| seen|...

ECHO-27CF-A6B2-C632

Bulletin has no description...

ECHO-A540-A282-AEF6

Bulletin has no description...

CVE-2026-42547

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for customers that are not assigned to them. This can be abused to falsely attribute fake alerts to customers. In combination wit...

CVE-2026-7654

creationtimestamp| type| source ---|---|--- 2026-06-05 23:59:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlduknsmz2g 2026-06-06 00:00:18+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnldvanx2n2s 2026-06-06 00:55:49+00:00| seen|...

CVE-2025-69624

Nitro PDF Pro for Windows 14.41.1.4 contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert. When app.alert is called with more than one argument and the first argument evaluates to null for example, app.alertapp.activeDocs, true when app.activeDocs is null...

CVE-2026-8876

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data...

CVE-2026-8874

Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS...

CVE-2026-5208

Command injection in alerts in CoolerControl/coolercontrold 4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names...

CVE-2026-44888

Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile endpoint writes user-supplied numeric config values e.g., SMTPPORT directly into pialert.conf without validation. Since pialert.conf is loaded via Python's exec every 3–5 minutes...

CVE-2026-11090

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11092

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 15:02:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnpgnmtpud25 2026-06-07 18:00:00+00:00| seen|...

CVE-2025-8873

creationtimestamp| type| source ---|---|--- 2026-06-05 00:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnitj56uzy2r...

CVE-2026-26555

creationtimestamp| type| source ---|---|--- 2026-06-04 23:00:15+00:00| seen| Telegram/ZO8GXKofeRUVwVPphXUXme80ypLutlvGOITV9wiiQ1h3jLc 2026-06-05 03:00:06+00:00| seen| Telegram/w0GkJHs0a-iOGxRnRQVAJ6txbFx-4W5StLXj-Qhn1zDpC10...