Malicious code in brook-aspen-jdw189-project (npm)

The package brook-aspen-jdw189-project was found to contain malicious code...

Malicious code in biomimicry-supercluster-apollo-mutation (npm)

The package biomimicry-supercluster-apollo-mutation was found to contain malicious code...

Malicious code in @malware-test-abear-aglet-solan-sangs/test-mlw3-abear-aglet-solan-sangs (npm)

The package @malware-test-abear-aglet-solan-sangs/test-mlw3-abear-aglet-solan-sangs was found to contain malicious code...

LLM Coding Integrity Breach

Here's an interesting story about a failure being introduced by LLM-written code. Specifically, the LLM was doing some code refactoring, and when it moved a chunk of code from one file to another it changed a "break" to a "continue." That turned an error logging statement into an infinite loop,...

IBM 2025 Cost of a Data Breach Report: Lessons for API and AI Security

IBM’s 2025 Cost of a Data Breach Report offers one of the clearest and most comprehensive views yet of how AI adoption is shaping the security landscape. While breach numbers are relatively low – only 13% of organizations reported breaches involving AI models or applications – the report reveals ...

The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived

The breach of the US Courts records system came to light more than a month after the attack was discovered. Details about what was exposed—and who’s responsible—remain unclear...

TOTOLINK N350R 安全漏洞

TOTOLINK N350R is a WiFi router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK N350R version 1.2.3-B20130826, which originates from a backdoor due to incorrect operation of the parameter TelEnabled in the file /boafrm/formSysTel...

Altus Cars Lotus Cars Android app 安全漏洞

Altus Cars Lotus Cars Android app is a mobile app from UK-based Altus Cars that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which stems from allowBackup set to true, which could lead to user data...

CVE-2025-8660

Privilege escalation occurs when a user gets access to more resources or functionality than they are normally allowed...

Palo Alto Networks GlobalProtect 安全漏洞

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides features such as firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect that stems from insufficient certificate...

GitLab Security Breach

GitLab is an end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE, which stems from a known weakness and...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware codebase from China Insyde Insyde. A security vulnerability exists in InsydeH2O, which can be exploited to write to arbitrary memory in SMRAM and execute arbitrary code at the SMM level...

Spree Commerce 安全漏洞

Spree Commerce is an e-commerce platform from Spree Open Source. A security vulnerability exists in Spree Commerce versions prior to 0.60.2 that stems from the search function not cleaning up inputs, which could lead to remote command execution...

Palo Alto Networks Checkov 安全漏洞

Palo Alto Networks Checkov is a code static analysis tool from Palo Alto Networks USA. A security vulnerability exists in Palo Alto Networks Checkov, which stems from an information leak that could lead to the exposure of Prisma Cloud access keys in plaintext...

Microsoft Patch Tuesday, August 2025 Edition

Microsoft today released updates to fix more than 100 security flaws in its Windows operating systems and other software. At least 13 of the bugs received Microsoft's most-dire "critical" rating, meaning they could be abused by malware or malcontents to gain remote access to a Windows system with...

Connex Credit Union Data Breach Affects 172,000 Members

Connex Credit Union breach exposes data of 172000 members, legal probe launched, experts urge victims to monitor accounts…...

SAP Business One 安全漏洞

SAP Business One is a suite of business management software from the German company SAP. The software includes functions for financial management, operations management and human resource management. A security vulnerability exists in SAP Business One, which stems from a flaw in the authorization...

Fortinet多款产品 安全漏洞

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees by combining a variety of detection technologies such as Web...

Bouncy Castle 安全漏洞

Bouncy Castle is a collection of APIs used in cryptography organized by Bouncy Castle. It includes APIs for the Java and C programming languages . A security vulnerability exists in Bouncy Castle versions 1.77 and earlier, which stems from an unrestricted resource allocation that could lead to...

Kanboard 安全漏洞

Kanboard is a suite of open source visual task board software from Kanboard Open Source. The software has the ability to customize the panels based on the business. A security vulnerability exists in Kanboard versions prior to 1.2.47, which stems from the API not validating the taskid parameter a...