MAL-2025-47663 Malicious code in example-fastify-web (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47658 Malicious code in eslint-v9232 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47646 Malicious code in com.unity.xr.hands (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47632 Malicious code in com.unity.process-server (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in discordext (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-20293

creationtimestamp| type| source ---|---|--- 2025-09-26 08:27:34+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-cisco-ios-ja-ios-xe-laitteissa...

CVE-2025-20149

creationtimestamp| type| source ---|---|--- 2025-09-25 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1645 2025-09-25 11:38:17+00:00| exploited| https://t.me/truesecator/7459 2025-09-26 08:27:34+00:00| seen|...

CVE-2025-57174

creationtimestamp| type| source ---|---|--- 2025-09-24 22:15:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/52962 2025-09-25 03:00:06+00:00| published-proof-of-concept| Telegram/r9FFizCMP-tS1yZUxm-u3OCJUabCQTP13S7wBpJFXakycg 2025-09-27 21:02:34+00:00| seen|...

Retail at risk: How one alert uncovered a persistent cyberthreat​​

In the latest edition of our Cyberattack Series, we dive into real-world cases targeting retail organizations. With 60% of retail companies reporting operational disruptions from cyberattacks and 43% experiencing security compromises in the past year, the risks for businesses continue to increase...

CVE-2025-20313

creationtimestamp| type| source ---|---|--- 2025-09-24 16:57:56+00:00| seen| https://gist.github.com/Darkcrai86/ac6cd26c4396a3d910b3e2cd36189bef 2025-09-26 08:27:34+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-cisco-ios-ja-ios-xe-laitteissa...

CVE-2025-27077

creationtimestamp| type| source ---|---|--- 2025-09-24 15:52:58+00:00| seen| Telegram/wmXNWgCbj1oAznMcg4IIf1L8EA6upR-9ASQBUg8fvBVxDnc...

CVE-2025-23248

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service...

CVE-2025-57902

creationtimestamp| type| source ---|---|--- 2025-09-23 20:49:33+00:00| seen| Telegram/hs-4PUgHiXTkJBMsrb9z084ZiMgQb37q6zfRSbaTTVdvhk...

CVE-2025-58671

creationtimestamp| type| source ---|---|--- 2025-09-23 16:49:58+00:00| seen| Telegram/mb8gLQD4SrM6OLS3941ymRznRACt1s60azHSR2ntMj3ucU...

CVE-2025-56394

creationtimestamp| type| source ---|---|--- 2025-09-23 04:07:00+00:00| seen| https://gist.github.com/DDGod2025/532691e3e2db9b47c67c3d153c026e62...

MAL-2025-48891 Malicious code in final-osint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4fd0b958714b427b2b2c39e7afd8134f71fae10467ce32d52cffeb74ec716c2 Importing the module starts an infostealer exfiltrating e.g. browser data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealer...

CVE-2025-6544

creationtimestamp| type| source ---|---|--- 2025-09-21 13:28:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzdyqsetzd2c 2025-09-22 01:32:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzfb75ldxl2w 2026-05-22 14:09:29+00:00| seen|...

Malicious Package

Overview internallibv915 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines

Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform's Community Edition. The workflow we are highlighting...

CVE-2025-6198

creationtimestamp| type| source ---|---|--- 2025-09-19 05:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz657cfcn62c 2025-09-23 18:51:24+00:00| seen| https://infosec.exchange/users/edwardk/statuses/115255114722172590 2025-09-24 04:06:07+00:00| seen|...