Malicious code in azure-sdk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479067c01646643f73d6f81188d5b155d76d985758485a7b0c6fe92326db09d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1653 Malicious code in azure-sdk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479067c01646643f73d6f81188d5b155d76d985758485a7b0c6fe92326db09d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE SLES15 / openSUSE 15 Security Update : azure-cli (SUSE-SU-2025:0751-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0751-1 advisory. - CVE-2024-43591: improper neutralization of special elements could allow users to run Azure CLI commands that result in certa...

SUSE SLES15 / openSUSE 15 Security Update : python-azure-identity (SUSE-SU-2025:0750-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0750-1 advisory. - CVE-2024-35255: race condition leading to privilege escalation and unauthorized access to sensitive information in Azure...

Microsoft Disrupts Storm-2139 for LLMjacking and Azure AI Exploitation

Microsoft exposes Storm-2139, a cybercrime network exploiting Azure AI via LLMjacking. Learn how stolen API keys enabled harmful…...

Security update for azure-cli

This update for azure-cli fixes the following issues: CVE-2024-43591: improper neutralization of special elements could allow users to run Azure CLI commands that result in certain service management operations being performed with System level permissions in Azure Defender for Cloud bsc1231971...

SUSE-SU-2025:0751-1 Security update for azure-cli

This update for azure-cli fixes the following issues: - CVE-2024-43591: improper neutralization of special elements could allow users to run Azure CLI commands that result in certain service management operations being performed with System level permissions in Azure Defender for Cloud bsc1231971...

Security update for python-azure-identity

This update for python-azure-identity fixes the following issues: CVE-2024-35255: race condition leading to privilege escalation and unauthorized access to sensitive information in Azure Identity libraries bsc1230100. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:0750-1 Security update for python-azure-identity

This update for python-azure-identity fixes the following issues: - CVE-2024-35255: race condition leading to privilege escalation and unauthorized access to sensitive information in Azure Identity libraries bsc1230100...

Microsoft Exposes LLMjacking Cybercriminals Behind Azure AI Abuse Scheme

Microsoft on Thursday unmasked four of the individuals that it said were behind an Azure Abuse Enterprise scheme that involves leveraging unauthorized access to generative artificial intelligence GenAI services in order to produce offensive and harmful content. The campaign, called LLMjacking, ha...

MAL-2025-1558 Malicious code in azure_monitor_workbook_templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946eb62e7df5c8b7673959c34a3b571b59dd29db4be999b3c3cd130cde0d541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure_monitor_workbook_templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946eb62e7df5c8b7673959c34a3b571b59dd29db4be999b3c3cd130cde0d541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Azure Linux 3.0 Security Update: opensc (CVE-2023-5992)

The version of opensc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5992 advisory. - A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side- channe...

Azure Linux 3.0 Security Update: expat / python3 (CVE-2024-28757)

The version of expat / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28757 advisory. - libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external...

Azure Linux 3.0 Security Update: openssh (CVE-2025-26465)

The version of openssh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26465 advisory. - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle...

USN-7294-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: thanos, vite, pulumi-language-yaml, wazero, k3s, wire-go, capslock, k8sgpt-operator, task, kubernetes-event-exporter, aws-load-balancer-controller, kpt, nri-cassandra, aws-efs-csi-driver, aws-flb-kinesis, php-fpmexporter, buildkitd, controller-gen, kube-rbac-proxy,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: thanos, vite, pulumi-language-yaml, wazero, k3s, wire-go, capslock, k8sgpt-operator, task, kubernetes-event-exporter, aws-load-balancer-controller, kpt, nri-cassandra, aws-efs-csi-driver, aws-flb-kinesis, php-fpmexporter, buildkitd, controller-gen, kube-rbac-proxy,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: wire-go, capslock, kubernetes-event-exporter, rancher-loglevel, swagger, kserve-rest-proxy, http-echo, runc, kubernetes-release, openbao-k8s, aws-flb-firehose, direnv, paranoia, vendir, spiffe-helper, whereabouts, undock, nri-f5, redka, boring-registry, helm-operator...

USN-7289-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; -...