File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add

file-unpumper is a powerful command-line utility designed to clean and analyze Portable Executable PE files. It provides a range of features to help developers and security professionals work with PE files more effectively. Features PE Header Fixing : file-unpumper can fix and align the PE header...

Malicious code in npm-evil-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5422630a80e283b7ae938687b04a988bee70b5c8b137520d4aaca5af1b979c3 The OpenSSF Package Analysis project identified 'npm-evil-fish' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Tor anonymity compromised by law enforcement. Is it still safe to use?

Despite people generally considering the Tor network as an essential tool for anonymous browsing, german law enforcement agencies have managed to de-anonymize Tor users after putting surveillance on Tor servers for months. Before we go into the what the agencies did, let's take a look at some...

This Windows PowerShell Phish Has Scary Potential

ManyGitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing...

MAL-2024-8912 Malicious code in infosnap-secure-family-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26fd78e593cb831595d3ef036383a3570e155771197138cd43afac672bfe304 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8941 Malicious code in confidential-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22b6e399f6684509440f29b16a20c593cc1aee7a15e87f5263dfe847b6d7850a The OpenSSF Package Analysis project identified 'confidential-package-name' @ 99.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-8911 Malicious code in dc-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5534b8254822e7e5f6e4ee2e6f748422783f8a2aebac5f16fca13c06af524468 The OpenSSF Package Analysis project identified 'dc-testing' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

Kastle Systems Access Control System

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION : Exploitable remotely/low attack complexity Vendor : Kastle Systems Equipment : Access Control System Vulnerabilities : Use of Hard-coded Credentials, Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of...

Malicious code in bsc-stdlib-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df99335a79394c76ec65c4c11bd937510961ba93b67e631d560753ab61a735b6 The OpenSSF Package Analysis project identified 'bsc-stdlib-polyfill' @ 0.0.1 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-8900 Malicious code in bsc-stdlib-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df99335a79394c76ec65c4c11bd937510961ba93b67e631d560753ab61a735b6 The OpenSSF Package Analysis project identified 'bsc-stdlib-polyfill' @ 0.0.1 npm as malicious. It is considered malicious because: - The packag...

UBUNTU-CVE-2024-46728

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for auxrdinterval before using auxrdinterval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues reported by Coverity...

How to Investigate ChatGPT activity in Google Workspace

When you connect your organization's Google Drive account to ChatGPT, you grant ChatGPT extensive permissions for not only your personal files, but resources across your entire shared drive. As you might imagine, this introduces an array of cybersecurity challenges. This post outlines how to see...

Malicious code in ui-extensions-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612535ed853f3bcea44a30e8568888db73a09aa577ffd88994bf21ea077c985a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Yokogawa Dual-redundant Platform for Computer (PC2CKM)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Yokogawa Equipment : Dual-redundant Platform for Computer PC2CKM Vulnerability : Unchecked Return Value 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

Millbeck Communications Proroute H685t-w

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Millbeck Communications Equipment : Proroute H685t-w Vulnerabilities : Command Injection, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow...

MAL-2024-8876 Malicious code in testing_coll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8518731ff24bfebf9747d6cf7d3a365c7061fe94c0bcc413a194915890f31f75 The OpenSSF Package Analysis project identified 'testingcoll' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Psobf - PowerShell Obfuscator

Tool for obfuscating PowerShell scripts written in Go. The main objective of this program is to obfuscate PowerShell code to make its analysis and detection more difficult. The script offers 5 levels of obfuscation, from basic obfuscation to script fragmentation. This allows users to tailor the...

MAL-2024-8875 Malicious code in rust-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879e91954c530c7fda9e73575ef2f4a945be9a29a5761866d4a4470b32469ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8874 Malicious code in events_pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd8e0d60317b9c1b711d6f1dcbf88073cf135c6a018bc578641d68f8bddb270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in events_pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd8e0d60317b9c1b711d6f1dcbf88073cf135c6a018bc578641d68f8bddb270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...