GO-2026-6686 vulnerabilities

Vulnerabilities for packages: k8s-image-swapper-fips, scorecard, newrelic-infrastructure-agent, runc-fips, umoci, chaos-mesh-fips, rke2-runtime-fips, rancher-agent, kubevirt-cdi-importer, packer-fips, rancher, zarf-fips, packer, cloudbeat-fips, ctop-fips, chaos-mesh, k3s, eks-distro-fips,...

Malware in down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between...

chaos

chaos chaos es un escáner de IP de 'origen' desarrollado por RST en colaboración con ChatGPT. Es una utilidad de nicho con una audiencia prevista de probadores de penetración y cazadores de bugs principalmente. Una IP de origen es una expresión técnica que describe la dirección IP pública final...

chaostoolkit

Chaos Toolkit - Chaos Engineering per tutti gli ingegneri Community • Installazione • Tutorial • Riferimenti • ChangeLog Chaos Toolkit - Chaos Engineering per tutti gli ingegneri Chaos Toolkit, o come amiamo chiamarlo “ctk”, è un semplice strumento basato su CLI che ti aiuta a scrivere ed eseguir...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, scorecard, grype-fips, steampipe, trivy-operator-fips, zarf-fips, chainctl, cloudbeat-fips, packer, k3s, helm-operator-fips, k3s-fips, harvester, kargo, skaffold-fips, atmos, kubescape-operator, falco-no-driver, dagger, helm-mapkubeapis,...

kube-monkey v0.7.0

kube-monkey kube-monkey is an implementation of Netflix's Chaos Monkey for Kubernetes clusters. It randomly deletes pods in the cluster, encouraging and validating the development of failure-resilient services. Apps opt in with a label, terminations happen during the hours and days you pick, and...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, steampipe, trivy-operator-fips, kyverno, zarf-fips, cloudbeat-fips, helm-operator-fips, kargo, gogatekeeper, cilium-cli, conftest, helm-mapkubeapis, drone, gitlab-operator-fips, rancher-helm, oras-fips, kgateway-fips, kubescape, trivy,...

Malicious code in chaos-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21d36cc80c620f92695d98b05bcfc786a623e64b18b1394f2c85064fc44fb53 lib/report.js imports childprocess, fs, os, and https and, via execSync plus fs.readFileSync calls, collects host identifiers os.hostname, os.userInf...

Malicious Package

Overview chaos-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-11458 Malicious code in chaos-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21d36cc80c620f92695d98b05bcfc786a623e64b18b1394f2c85064fc44fb53 lib/report.js imports childprocess, fs, os, and https and, via execSync plus fs.readFileSync calls, collects host identifiers os.hostname, os.userInf...

BlackMoon FTP Chaos Edition Service - Detect

BlackMoon FTP Chaos Edition service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """BlackMoon FTP Chaos Edition service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info =...

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, found on a compromised Windows machine ahead of the encryptor. The implant never opens an outbound connection of its own. Its process talks...

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

Cisco Talos has discovered a new Rust-based remote access trojan RAT we call "msaRAT" attributed to the Chaos ransomware group. The name is derived from the binding names found in the binary: "msaOpen," "msaClose," "msaError," and "msaMessage". msaRAT is implemented using the Tokio asynchronous...

GHSA-FF9F-JF42-662Q

creationtimestamp| type| source ---|---|--- 2026-07-17 21:19:56+00:00| seen| https://chaos.social/users/christopherkunz/statuses/116937404931312120 2026-07-20 13:00:41+00:00| seen| https://www.cert.at/de/warnungen/2026/7/kritische-sicherheitslucken-in-wordpress-updates-verfugbar 2026-07-20...

CVE-2026-63030

creationtimestamp| type| source ---|---|--- 2026-07-17 21:19:56+00:00| seen| https://chaos.social/users/christopherkunz/statuses/116937404931312120 2026-07-17 22:19:07+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mqursxmdqy2o 2026-07-17 22:53:06+00:00| seen|...

Piercing Gilbreath'S Conjecture: From Deep Number Theory Insights to Fintech and Cybersecurity

I propose a new methodology to attack the fascinating Gilbreath's conjecture about prime numbers, first posted in 1878 and unsolved to this day. The problem statement is rudimentary: kids can understand it. However, despite decades of research, almost no progress has been made. This paper changes...

Security Bulletin: Vulnerability in BIND (CVE-2026-3592, CVE-2026-5946) affects AIX/ VIOS.

Summary CVE-2026-3592: Resolver queries a specially crafted zone containing self-pointed glue records, causing disproportionate resource consumption. CVE-2026-5946: Specially crafted DNS messages using non-IN classes e.g., CHAOS, HESIOD, ANY, NONE trigger assertion failures, terminating the named...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, scorecard, grype-fips, steampipe, trivy-operator-fips, zarf-fips, chainctl, cloudbeat-fips, packer, k3s, helm-operator-fips, harvester, kargo, skaffold-fips, kubescape-operator, falco-no-driver, dagger, helm-mapkubeapis, rancher-helm,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, scorecard, grype-fips, upwind-agent, steampipe, trivy-operator-fips, zarf-fips, chainctl, cloudbeat-fips, packer, k3s, helm-operator-fips, harvester, kargo, skaffold-fips, kubescape-operator, falco-no-driver, dagger, helm-mapkubeapis,...