CVE-2019-18840

creationtimestamp| type| source ---|---|--- 2024-02-11 10:01:55+00:00| seen| https://t.me/ctinow/182730...

MAL-2024-986 Malicious code in @globalsearch/abstraction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c271fedc45bc79b4a8271bea06418a439b10ad445df1c5ea1cc19fcf1dd377a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-20953

creationtimestamp| type| source ---|---|--- 2024-02-10 10:11:49+00:00| seen| https://t.me/ctinow/182506 2025-02-24 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-02-24 18:26:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5199 2025-02-24 18:53:21+00:00| seen|...

MAL-2024-985 Malicious code in iris-front-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed1b8ea683be3ab1a06938511d841bfbd293b36b9a8bcccedd6d794a2af3f85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23749

creationtimestamp| type| source ---|---|--- 2024-02-09 09:21:45+00:00| seen| https://t.me/ctinow/181904 2024-02-11 13:04:04+00:00| seen| https://t.me/arpsyndicate/3377 2024-02-14 08:56:59+00:00| seen| https://t.me/ctinow/184478 2024-02-14 17:16:42+00:00| seen| https://t.me/ctinow/184827 2024-02-1...

CVE-2024-24830

creationtimestamp| type| source ---|---|--- 2024-02-09 00:26:30+00:00| seen| https://t.me/ctinow/181728 2024-02-12 05:41:33+00:00| seen| https://t.me/arpsyndicate/3441 2024-02-15 21:17:00+00:00| seen| https://t.me/ctinow/185878 2024-03-02 17:41:37+00:00| seen| https://t.me/ctinow/198427...

CISA and Partners Release Advisory on PRC-sponsored Volt Typhoon Activity and Supplemental Living Off the Land Guidance

Today, CISA, the National Security Agency NSA, and the Federal Bureau of Investigation FBI released a joint Cybersecurity Advisory CSA, PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure alongside supplemental Joint Guidance: Identifying and...

MAL-2024-973 Malicious code in packages-analytic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 970fc09fccad26ac5a8eb48041b00f5f843260c7c594cd0211198e2b191f82c0 The OpenSSF Package Analysis project identified 'packages-analytic' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in discord.js-commandv14.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6755481c28189c15e2d7c4b6e9aa1992ba3317cd999a39efef14219c69956d09 The OpenSSF Package Analysis project identified 'discord.js-commandv14.1' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-972 Malicious code in internal-corp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3988d65f66ad5458f837d634b38f70d920bb0bffc57c0f5518f3ec99db298a2f The OpenSSF Package Analysis project identified 'internal-corp-package' @ 1.5.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-976 Malicious code in discord.js-commandv14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 126e742ca73d1c4cdf2ec98e46c96cef6f7c92d341e8c71305b73c0fcfdb69e9 The OpenSSF Package Analysis project identified 'discord.js-commandv14' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-23344

creationtimestamp| type| source ---|---|--- 2024-02-06 17:31:57+00:00| seen| https://t.me/ctinow/180160 2024-03-01 10:46:18+00:00| seen| https://t.me/ctinow/197488 2025-05-09 17:25:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15790...

How a $10B Enterprise Customer Drastically Increased their SaaS Security Posture with 201% ROI by Using SSPM

SaaS applications are the darlings of the software world. They enable work from anywhere, facilitate collaboration, and offer a cost-effective alternative to owning the software outright. At the same time, the very features that make SaaS apps so embraced – access from anywhere and collaboration ...

Attacks, Vulnerabilities and Actors 29 January to 4 February 2024

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of seven executed attacks, two instances of adversary activity, and six exploited...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from a security issue in the AccountActivity of the Galaxy Store applicatio...

Belarusian National Linked to BTC-e Faces 25 Years for $4 Billion Crypto Money Laundering

A 42-year-old Belarusian and Cypriot national with alleged connections to the now-defunct cryptocurrency exchange BTC-e is facing charges related to money laundering and operating an unlicensed money services business. Aliaksandr Klimenka, who was arrested in Latvia on December 21, 2023, was...

CVE-2019-18811

creationtimestamp| type| source ---|---|--- 2024-02-05 15:46:16+00:00| seen| https://t.me/ctinow/179265...

CVE-2019-8113

creationtimestamp| type| source ---|---|--- 2024-02-04 12:46:34+00:00| seen| https://t.me/ctinow/178813...

Malicious code in cifuzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7377471f095cc9fc80601acc697c994417df898d009b1cb5fa4c14ca198ae15 The OpenSSF Package Analysis project identified 'cifuzz' @ 1.2.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-970 Malicious code in discord.js-commandsv14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0552b95113f728a401629d22107eae7aa9479e0632b876f49e2558af8784f665 The OpenSSF Package Analysis project identified 'discord.js-commandsv14' @ 1.0.4 npm as malicious. It is considered malicious because: - The...