29374 matches found
Weak Passwords and Compromised Accounts: Key Findings from the Blue Report 2025
As security professionals, it's easy to get caught up in a race to counter the latest advanced adversary techniques. Yet the most impactful attacksoften aren't from cutting-edge exploits, but from cracked credentials and compromised accounts. Despite widespread awareness of this threat vector,...
Weak Passwords and Compromised Accounts: Key Findings from the Blue Report 2025
As security professionals, it's easy to get caught up in a race to counter the latest advanced adversary techniques. Yet the most impactful attacksoften aren't from cutting-edge exploits, but from cracked credentials and compromised accounts. Despite widespread awareness of this threat vector,...
Malicious code in grok-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e3c3ed43462c81e220a40fc8643c2c519f947bb781dff9a1d13de547b4d520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-41247 Malicious code in grok-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e3c3ed43462c81e220a40fc8643c2c519f947bb781dff9a1d13de547b4d520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux Distros Unpatched Vulnerability : CVE-2021-20179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again,...
CVE-2025-8047
The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert...
Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme
Cybercriminal groups peddling sophisticated phishing kits that convert stolen card data into mobile wallets have recently shifted their focus to targeting customers of brokerage services, new research shows. Undeterred by security controls at these trading platforms that block users from wiring...
MAL-2025-6888 Malicious code in meid-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54a1eca3fe980472cd2c418bc50f361595c86cc248665cdf8e01129e7af96f66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @yaqiguo/dnstest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3478ba78740bef836d1172c597de70dda1774f80ed7d9c3b8273dc9fbc9db71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux Distros Unpatched Vulnerability : CVE-2019-11765
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown. However, due to lac...
Malicious code in pyobot (npm)
The package pyobot was found to contain malicious code...
Malicious code in test-mlw2-lingy-akene (npm)
The package test-mlw2-lingy-akene was found to contain malicious code...
Malicious code in virgo-jwt-style-loader-titan (npm)
The package virgo-jwt-style-loader-titan was found to contain malicious code...
MAL-2025-38156 Malicious code in vbozeu (npm)
The package vbozeu was found to contain malicious code...
MAL-2025-39038 Malicious code in webpay-webserviceAPI (npm)
The package webpay-webserviceAPI was found to contain malicious code...
Malicious code in ssucss (npm)
The package ssucss was found to contain malicious code...
Malicious code in bictoinjs-lib (npm)
The package bictoinjs-lib was found to contain malicious code...
Malicious code in bramble_a7n1r_62cnt_nectar (npm)
The package bramblea7n1r62cntnectar was found to contain malicious code...