Soft Serve security vulnerability

Soft Serve is a self-hostable command-line Git server from Charm Open Source. A security vulnerability exists in Soft Serve versions prior to 0.10.0, which stems from not removing ANSI escape sequences and not cleaning up git messages, which could lead to a fake alert attack...

CVE-2025-64336

creationtimestamp| type| source ---|---|--- 2025-11-07 06:17:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4zglip5lf2b 2025-11-07 07:10:46+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zjkgsnyaa2 2025-11-07 09:01:58+00:00| seen|...

PT-2025-48203

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2 Description Suricata is a network IDS, IPS and NSM engine. A heap overflow can occur when logging verdict information in eve.alert and eve.drop records for versions prior to...

CGA-3C3G-82QR-4X65

Bulletin has no description...

Why SOC Burnout Can Be Avoided: Practical Steps

Behind every alert is an analyst; tired eyes scanning dashboards, long nights spent on false positives, and the constant fear of missing something big. It's no surprise that many SOCs face burnout before they face their next breach. But this doesn't have to be the norm. The path out isn't through...

Malware in react-notifications-alert

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in react-notifications-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe66f8e85ad0ad7c2682e9640e0f2a48344bcef9beeaa8de12e5e687744acf The package react-notifications-alert was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49361 Malicious code in react-notifications-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe66f8e85ad0ad7c2682e9640e0f2a48344bcef9beeaa8de12e5e687744acf The package react-notifications-alert was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview react-notifications-alert is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-37866

Malicious code in react-notifications-alert npm...

EUVD-2025-37868

Malicious code in bcryptjs-node npm...

​​Learn what generative AI can do for your security operations center

The busier security teams get, the harder it can be to understand the full impact of false positives, queue clutter, tool fragmentation, and more. But what is clear—it all adds up to increased fatigue and an increased potential to miss the cyberthreats that matter most. To help security teams...

​​Learn what generative AI can do for your security operations center

The busier security teams get, the harder it can be to understand the full impact of false positives, queue clutter, tool fragmentation, and more. But what is clear—it all adds up to increased fatigue and an increased potential to miss the cyberthreats that matter most. To help security teams...

CVE-2025-12184

creationtimestamp| type| source ---|---|--- 2025-11-04 15:36:04+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suf7ogxmj2 2025-11-04 16:21:37+00:00| seen| https://gist.github.com/Darkcrai86/d6a37014331756915af12b3fe18b7a9b 2025-11-04 17:52:18+00:00| seen|...

CVE-2025-20729

creationtimestamp| type| source ---|---|--- 2025-11-04 11:34:54+00:00| seen| https://gist.github.com/Darkcrai86/a2f8c588d5a0dbb6107299e795be1824...

CVE-2024-13998

creationtimestamp| type| source ---|---|--- 2025-11-04 01:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4rgngpw6p2b...

On the Dangers of Poisoned LLMs in Security Automation

This paper investigates some of the risks introduced by "LLM poisoning," the intentional or unintentional introduction of malicious or biased data during model training. We demonstrate how a seemingly improved LLM, fine-tuned on a limited dataset, can introduce significant bias, to the extent tha...

MAL-2025-49347 Malicious code in lowerx-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c339fedf47fd9aff8ff17bb12b8d3014f38189be9b38d17606826127b03ff6ba The package lowerx-package was found to contain malicious code...

MAL-2025-49336 Malicious code in dowload_ebok_life_on_earth_by_mike_dooley_sncwl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66c61615dbda3a1e20db3240a0b7efb05c24bc394770add24fff4f4891b6f38 The package dowloadeboklifeonearthbymikedooleysncwl was found to contain malicious code...

MAL-2025-49344 Malicious code in reservas-hilton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5ca347c7af71a9788e40f912d08b88ae5dfae7044f9db24fe5484c00116b55 The package reservas-hilton was found to contain malicious code...