676 matches found
EUVD-2025-78797
Malicious code in militarybandicootz3n npm...
EUVD-2025-78795
Malicious code in militarykiwiz3n npm...
Malicious code in military_badger_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80db272c60b9ac6c78fe9255907f7c0fa8123535944b204239c9e438e3979474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-63077
Malicious code in militarybuzzardz3n npm...
EUVD-2025-84732
Malicious code in militaryguineafowlz3n npm...
EUVD-2025-53254
Malicious code in military-pink-puffin npm...
EUVD-2025-53253
Malicious code in military-rose-puffin npm...
EUVD-2025-53252
Malicious code in military-scarlet-amphibian npm...
EUVD-2025-58320
Malicious code in militarydonkeyz3n npm...
EUVD-2025-49812
Malicious code in militarykangarooz3n npm...
EUVD-2025-49811
Malicious code in militaryswordtailz3n npm...
Bitter APT Exploiting Old WinRAR Vulnerability in New Backdoor Attacks
South Asian hacking group Bitter APT-Q-37 is deploying a C backdoor using two new methods: a WinRAR flaw and malicious Office XLAM files, targeting government and military sectors...
The Attribution Story of WhisperGate: An Academic Perspective
This paper explores the challenges of cyberattack attribution, specifically APTs, applying the case study approach for the WhisperGate cyber operation of January 2022 executed by the Russian military intelligence service GRU and targeting Ukrainian government entities. The study provides a detail...
Don't Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites
Geosynchronous GEO satellite links provide IP backhaul to remote critical infrastructure for utilities, telecom, government, military, and commercial users. To date, academic studies of GEO infrastructure have focused on a handful of satellites and specific use cases. The authors of this paper...
Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data
With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypted...
Troops and veterans’ personal information leaked in CPAP Medical data breach
In December 2024, CPAP Medical Supplies and Services Inc. CPAP, a Jacksonville—a Florida-based provider of sleep therapy services and CPAP machines—experienced a cybersecurity incident that compromised the personal data of over 90,000 patients. Since CPAP Medical specializes in tailored sleep apn...
New Report Links Research Firms BIETA and CIII to China's MSS Cyber Operations
A Chinese company named the Beijing Institute of Electronics Technology and Application BIETA has been assessed to be likely led by the Ministry of State Security MSS. The assessment comes from evidence that at least four BIETA personnel have clear or possible links to MSS officers and their...
Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files
A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...
Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files
A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...