​​Learn what generative AI can do for your security operations center

The busier security teams get, the harder it can be to understand the full impact of false positives, queue clutter, tool fragmentation, and more. But what is clear—it all adds up to increased fatigue and an increased potential to miss the cyberthreats that matter most. To help security teams...

​​Learn what generative AI can do for your security operations center

The busier security teams get, the harder it can be to understand the full impact of false positives, queue clutter, tool fragmentation, and more. But what is clear—it all adds up to increased fatigue and an increased potential to miss the cyberthreats that matter most. To help security teams...

CVE-2025-12184

creationtimestamp| type| source ---|---|--- 2025-11-04 15:36:04+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suf7ogxmj2 2025-11-04 16:21:37+00:00| seen| https://gist.github.com/Darkcrai86/d6a37014331756915af12b3fe18b7a9b 2025-11-04 17:52:18+00:00| seen|...

CVE-2025-20729

creationtimestamp| type| source ---|---|--- 2025-11-04 11:34:54+00:00| seen| https://gist.github.com/Darkcrai86/a2f8c588d5a0dbb6107299e795be1824...

CVE-2024-13998

creationtimestamp| type| source ---|---|--- 2025-11-04 01:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4rgngpw6p2b...

On the Dangers of Poisoned LLMs in Security Automation

This paper investigates some of the risks introduced by "LLM poisoning," the intentional or unintentional introduction of malicious or biased data during model training. We demonstrate how a seemingly improved LLM, fine-tuned on a limited dataset, can introduce significant bias, to the extent tha...

MAL-2025-49347 Malicious code in lowerx-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c339fedf47fd9aff8ff17bb12b8d3014f38189be9b38d17606826127b03ff6ba The package lowerx-package was found to contain malicious code...

MAL-2025-49336 Malicious code in dowload_ebok_life_on_earth_by_mike_dooley_sncwl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66c61615dbda3a1e20db3240a0b7efb05c24bc394770add24fff4f4891b6f38 The package dowloadeboklifeonearthbymikedooleysncwl was found to contain malicious code...

EUVD-2025-37537

Malicious code in reservas-hilton npm...

MAL-2025-49344 Malicious code in reservas-hilton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5ca347c7af71a9788e40f912d08b88ae5dfae7044f9db24fe5484c00116b55 The package reservas-hilton was found to contain malicious code...

The Evolution of SOC Operations: How Continuous Exposure Management Transforms Security Operations

Security Operations Centers SOC today are overwhelmed. Analysts handle thousands of alerts every day, spending much time chasing false positives and adjusting detection rules reactively. SOCs often lack the environmental context and relevant threat intelligence needed to quickly verify which aler...

CVE-2011-10039

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...

MAL-2025-49292 Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff0b87bff66ff36f0fe152f37cd1d7a0733b0a9ff2eecbd10e0b8ccc52e4437 The package @alexandrsarioglo/npm-ghost-htb was found to contain malicious code...

Malicious code in gel-gss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548b80c889e1007553fed7b6c39f257eb8e7bb58a140bf4c3b00ba3e23a6934 The package gel-gss was found to contain malicious code...

EUVD-2025-37283

Malicious code in blackbeard-navigator-ctf npm...

Malicious code in test882 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31514c1ba67261aad22d186ce1d76ed34c4cda2b146dcf6801fdcb156505dda The package test882 was found to contain malicious code. Source: ghsa-malware a7c1efeed4d026cd9899c479b5b207d5e82ab7fb917f84c402aab7798857bb0d Any...

EUVD-2011-5268

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...

Malicious Package

Overview icon-react-fork is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2011-10039

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...

CVE-2011-10039

CVE-2011-10039 affects Nagios XI versions prior to 2011R1.9. The issue is a cross-site scripting (XSS) vulnerability in the web interface, exploitable via the Alert Heatmap report and the “My Reports” listing due to insufficient input validation/escaping. The Red Hat and ENISA records corroborate...