MAL-2024-12051 Malicious code in uflexreward-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6f3991bf23d78bbb66f584b408dc443c00d8dab5a6221ab255911e5c17d058 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12052 Malicious code in uflexreward-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a03cd0b643eecb9171dd74f66e1916442f16b25e64f6652fc489fda6e8fe19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11957 Malicious code in component-detection-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612def523e2e2b3cd483831188b3e68f79f2575bc19954cc24088532608f7798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in component-detection-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612def523e2e2b3cd483831188b3e68f79f2575bc19954cc24088532608f7798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11951 Malicious code in client-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b972deca5352be5ff4ad1c1ca8d1b1da5c8f7f124ff1202510ecc3136ab617b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-12819

creationtimestamp| type| source ---|---|--- 2024-12-19 07:43:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113678365633955131 2024-12-19 09:48:07+00:00| seen| https://t.me/cvedetector/13314 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

Ubuntu: Security Advisory (USN-7175-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7177-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AI-generated malvertising “white pages” are fooling detection engines

This is no secret, online criminals are leveraging artificial intelligence AI and large language models LLMs in their malicious schemes. While AI tends to be abused to trick people i.e. deepfakes in order to gain something, sometimes, it is meant to defeat computer security programs. With AI, thi...

ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation

Across small-to-medium enterprises SMEs and managed service providers MSPs, the top priority for cybersecurity leaders is to keep IT environments up and running. To guard against cyber threats and prevent data breaches, it's vital to understand the current cybersecurity vendor landscape and...

Ubuntu: Security Advisory (USN-7169-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fortinet FortiAnalyzer Detection Consolidation

Consolidation of Fortinet FortiAnalyzer detections. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7164-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5833-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-11900 Malicious code in alifx-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8716d89d3543726f75604dccfd9a5ab777f48047bb3aa028cdc047c77d1b9dc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2024:4324-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-11891 Malicious code in @saferpay/react-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf4cc2b21097670e4c1c216967552f761f10ded3eb65a4a4b705aa0a5d6943e6 The OpenSSF Package Analysis project identified '@saferpay/react-library' @ 5.9.2 npm as malicious. It is considered malicious because: - The...

CVE-2024-54425

creationtimestamp| type| source ---|---|--- 2024-12-16 17:06:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113663592049903696...

MAL-2024-12372 Malicious code in zip-me (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4ae48b0e5e3d93cee49e83f0bfa47a43f02ede60914545d0d82204c6664fde6f During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...