Amazon Linux 2 : kernel, --advisory ALAS2-2026-3161 (ALAS-2026-3161)

The version of kernel installed on the remote host is prior to 4.14.355-280.713. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3161 advisory. In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: prevent perpetual headroom grow...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: use dstdevrcu in sksetupcaps CVE-2025-40170 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: add seqadj extension for natted connections CVE-2025-68206 In the Linux kernel...

Exposed AWS Credentials Lead to AI-Assisted Cloud Breach in 8 Minutes

Researchers recently tracked a high-speed cloud attack where an intruder gained full admin access in just eight minutes. Discover how AI automation and a simple storage error led to a major security breach...

CVE-2026-1778 TLS disabled by default in select aws/sagemaker-python-sdk configurations

Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed...

CVE-2025-38207 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...

BIT-DISCOURSE-2025-66488 Discourse allows script execution in uploaded HTML/XML files on S3

Discourse is an open source discussion platform. A vulnerability present in versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0 affects anyone who uses S3 for uploads. While scripts may be executed, they will only be run in the context of the S3/CDN domain, with no site credentials...

Malicious code in @casaverso/frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48584fd15701448c3394285943de2520455a7b1fc07cead90b74d535437feda4 The package @casaverso/frontend-core was found to contain malicious code. Source: ghsa-malware...

MAL-2026-636 Malicious code in idv-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bde07a7c30476e3cb1a1025e47aed005d4c7dd1795c0643ac2095a64e88b54 The package idv-script was found to contain malicious code. Source: ghsa-malware ee9e8b3868a2f4ff7829c20134e3617ac9a2d68093b156c31685710169c3f430 Any...

MAL-2026-635 Malicious code in finnairshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d4d53f987d9f13e00e895d04155d3d28ea228eacb34a2f273667e520c5525f The package finnairshop was found to contain malicious code...

Malicious code in cowsay-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f9486b25540d8b6cc57f25e49747500f20e247fa207953354e74d2cc62fbfd The package cowsay-fancy was found to contain malicious code...

MAL-2026-637 Malicious code in launchdarkly-cpp-networking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4fb76fdf3a3ab10ddc884a1fcc11f57ef3b0e44df500c5f2881f40cec0b20 The package launchdarkly-cpp-networking was found to contain malicious code. Source: ghsa-malware...

MAL-2026-638 Malicious code in solhint-plugin-hyperlane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1aa9de63bf20821ba2b8081862d56bf4238d4d5138cdfae10fa1d260ee9b57 The package solhint-plugin-hyperlane was found to contain malicious code. Source: ghsa-malware...

MAL-2026-630 Malicious code in cowsay-allcaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de832c3418f9a9b6e1645552b57338a05e07f2a479fd99f0aca66e931ebadac The package cowsay-allcaps was found to contain malicious code...

MAL-2026-628 Malicious code in @casaverso/frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48584fd15701448c3394285943de2520455a7b1fc07cead90b74d535437feda4 The package @casaverso/frontend-core was found to contain malicious code. Source: ghsa-malware...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, headlamp, actions-runner-controller, k3d, tfsec, kubeflow-pipelines, kubernetes-event-exporter, crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, stakater-reloader, kyverno-policy-reporter-ui, hubble, step-kms-plugi...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, hubble, nri-nagios, gatus, sftpgo-plugin-auth, pvc-autoresizer, swagger, influx, pguser, kyverno-policy-reporter-kyverno-plugin, cloud-provider-aws, fuse-overlayfs-snapshotter, go-jsonnet,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, headlamp, actions-runner-controller, k3d, tfsec, kubeflow-pipelines, kubernetes-event-exporter, langfuse, crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, stakater-reloader, kyverno-policy-reporter-ui, govulncheck,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, headlamp, actions-runner-controller, k3d, tfsec, kubeflow-pipelines, kubernetes-event-exporter, langfuse, crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, stakater-reloader, kyverno-policy-reporter-ui, govulncheck,...

MAL-2026-610 Malicious code in snapshot-date (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

Malicious code in snapshot-date (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...