Malicious code in shopify-app-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab44e75760c84102aeb55e53e2c77bb85fc0839e0873eb6dc778f14756e0bd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in routepair (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0bf8f39db8f1958548c7385f8b97d439b808b2da5e822353f5eb9171446e7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New details on TinyTurla’s post-compromise activity reveal full kill chain

Cisco Talos is providing an update on its two recent reports on a new and ongoing campaign where Turla, a Russian espionage group, deployed their TinyTurla-NG TTNG implant. We now have new information on the entire kill chain this actor uses, including the tactics, techniques and procedures TTPs...

Automakers Are Telling Your Insurance Company How You Really Drive

Plus: The operator of a dark-web cryptocurrency “mixing” service is found guilty, and a US senator reveals that popular safes contain secret backdoors...

Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors

An Iran-nexus threat actor known as UNC1549 has been attributed with medium confidence to a new set of attacks targeting aerospace, aviation, and defense industries in the Middle East, including Israel and the U.A.E. Other targets of the cyber espionage activity likely include Turkey, India, and...

New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

Cybersecurity researchers have found that it's possible to compromise the Hugging Face Safetensors conversion service to ultimately hijack the models submitted by users and result in supply chain attacks. "It's possible to send malicious pull requests with attacker-controlled data from the Huggin...

EU Court of Human Rights Rejects Encryption Backdoors

The European Court of Human Rights has ruled that breaking end-to-end encryption by adding backdoors violates human rights: Seemingly most critically, the Russian government told the ECHR that any intrusion on private lives resulting from decrypting messages was "necessary" to combat terrorism in...

Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

The Iranian-origin threat actor known as Charming Kitten has been linked to a new set of attacks aimed at Middle East policy experts with a new backdoor called BASICSTAR by creating a fake webinar portal. Charming Kitten, also called APT35, CharmingCypress, Mint Sandstorm, TA453, and Yellow Garud...

PT-2024-1794

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier Description The issue is related to an improper neutralization of special elements used in an OS command, which could lead to arbitrary code execution by an attacker. This...

China-Linked Hackers Target Myanmar's Top Ministries with Backdoor Blitz

The China-based threat actor known as Mustang Panda is suspected to have targeted Myanmar's Ministry of Defence and Foreign Affairs as part of twin campaigns designed to deploy backdoors and remote access trojans. The findings come from CSIRT-CTI, which said the activities took place in November...

Malicious code in wlwz-2312-6903 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf8473bd0317eeec12823d59400be29a1f563c946326f7a213510299b4cc60a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 020954427846009266a62392685953963017eed6398014bc1200c1c58ca7b59f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4402 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e795a571ad681e41aee120f0daf66190de29fc9ce965f42f284d1d7299d8750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISA Issues Emergency Directive to Federal Agencies on Ivanti Zero-Day Exploits

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday issued an emergency directive urging Federal Civilian Executive Branch FCEB agencies to implement mitigations against two actively exploited zero-day flaws in Ivanti Connect Secure ICS and Ivanti Policy Secure IPS products...

Malicious code in discord.js-selfbot-vl3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93b8a4d4a43d4cc9677b980b29b0c52f7767b770407fc60503959d4b1c585ca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks

Nation-state actors affiliated to North Korea have been observed using spear-phishing attacks to deliver an assortment of backdoors and tools such as AppleSeed, Meterpreter, and TinyNuke to seize control of compromised machines. South Korea-based cybersecurity company AhnLab attributed the activi...

PT-2023-8145

Name of the Vulnerable Software and Affected Versions Barracuda ESG Appliance versions 5.1.3.001 through 9.2.1.001 Description The issue is related to a case of arbitrary code execution that resides within a third-party and open-source library named Spreadsheet::ParseExcel, used by the Amavis...

Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally

SUMMARY The U.S. Federal Bureau of Investigation FBI, U.S. Cybersecurity & Infrastructure Security Agency CISA, U.S. National Security Agency NSA, Polish Military Counterintelligence Service SKW, CERT Polska CERT.PL, and the UK’s National Cyber Security Centre NCSC assess Russian Foreign...

Malicious code in pdf2htmlex3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8653c58975b64b6ccc0d8444ccd52bf0340ee3bba1ff946b68db2acd14dc98ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Android TV Boxes Infected with Backdoors, Compromising Home Networks

By Waqas The Android TV box you recently purchased may be riddled with harmful backdoors. This is a post from HackRead.com Read the original post: Android TV Boxes Infected with Backdoors, Compromising Home Networks...