MAL-2024-10847 Malicious code in eslint-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe353013f0da7eb67305f05b8a3b0db6e1dd3cd40ef4cc4a7bfc21029b380cf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10848 Malicious code in npm-cli-release-please (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feabb1bb20620ae160755e66696df9de9c058ba94e59b0cd910e81fa6a1829a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spex-node-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a39b71a7706221a863e8129674f28f4e5a1aec4ad4dfca5cdb243a0a4916901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10861 Malicious code in spex-dts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93132811b829ac6c32b8cf1e2c2c6bcaba42147399c45c495f0879e22871140f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10857 Malicious code in s-page-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5961a303ff8396036d6b8cda542e65ed06a42a3644538c84bf7a520e8c193a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ANY.RUN Sandbox Now Automates Interactive Analysis of Complex Cyber Attack Chains

Dubai, United Arab Emirates, 20th November 2024, CyberNewsWire...

Rapid7 Extends AWS Support to Include Coverage for Newly-Launched Resource Control Policies (RCPs)

In today’s cloud-first world, security and innovation go hand-in-hand. Rapid7 is excited to announce our support for Amazon Web Services’ AWS new Resource Control Policies RCPs, a powerful tool designed to bolster security controls for organizations using AWS infrastructure. As a launch partner f...

MAL-2024-10858 Malicious code in shopee-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993bcd6e55a784b07d25bde8752b92602b018036f8ba3de7fd78e85addad1634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10856 Malicious code in react-fatigue-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fcb64ab16a7b12d7342e39dae03aeb4556ed831e407c63d3ea67ede1b88aa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10855 Malicious code in node-elm-stdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009716aab1cfd479b733ac360984c2ede681513ace927b45f6b7f8a65c9bb92b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10854 Malicious code in mangadex-archive-torrent-processor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f61f9f0bddcac27e9556b815f90a7862641325b58347a0d02b6e965fbe86e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mangadex-archive-torrent-processor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f61f9f0bddcac27e9556b815f90a7862641325b58347a0d02b6e965fbe86e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks

A new China-linked cyber espionage group has been attributed as behind a series of targeted cyber attacks targeting telecommunications entities in South Asia and Africa since at least 2020 with the goal of enabling intelligence collection. Cybersecurity company CrowdStrike is tracking the adversa...

MAL-2024-10846 Malicious code in river-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28a856c975ffce278cd6752a94fda3cc892d9af33858cc33d5dcb4f0bdafeb62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dapp-test-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223b529f6331e7956b2e49069f8446746e4a8b25ebee059c4de01f152bbd5cc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10851 Malicious code in dapp-test-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223b529f6331e7956b2e49069f8446746e4a8b25ebee059c4de01f152bbd5cc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cljs-dopeloop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9232bb9421a218946057ab6688d62120e80b911ca38062d0ae6c42a951d2cddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

krb5 security update

1.21.1-4.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.1-4 - libkrad: implement support for Message-Authenticator CVE-2024-3596 Resolves: RHEL-55423 - Fix various issues detected by static analysis Resolves: RHEL-58216 - Remove RSA protocol for PKINIT Resolves: RHEL-15323...

On November 13, NIST NVD finally admitted the obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year (September 30)

On November 13, NIST NVD finallyadmittedthe obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year September 30. This is actually visible in their own statistics. At the moment, there are 19860 identifiers in the backlog. This week, 1136 new CVEs were...

CVE-2024-52585

creationtimestamp| type| source ---|---|--- 2024-11-18 20:50:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113505930058010161 2024-11-18 23:14:27+00:00| seen| https://t.me/cvedetector/11381...