MAL-2025-191495 Malicious code in @bingads-webui-clientcenter/instrumentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efd2376e1aa13253ea637d39c491337b642dec3198639e7b492c1aec1c083ad The package @bingads-webui-clientcenter/instrumentation was found to contain malicious code...

Malicious code in kmf-cookieservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0651437cb2370149f89a07f151cb2a6138c1929a7497e823a20b3afa768212 The package kmf-cookieservice was found to contain malicious code...

Malicious code in start-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a0cd368d9612b95c373551c4e8e15faac47d990feaba41964d85e4eff4b09 The package start-internal was found to contain malicious code...

MAL-2025-191496 Malicious code in @hand-talk/yotta-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa12c4979b84a435f622bda703becfcf1b917f52e0c1dbb8a1bc5a875d8d8edb The package @hand-talk/yotta-core was found to contain malicious code...

Malicious code in testhaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f0d8de5427f60c269fe53d3a876a67c03dc5c393599a5ca2b35d538fce9c3a The package testhaus was found to contain malicious code...

MAL-2025-191504 Malicious code in testhaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f0d8de5427f60c269fe53d3a876a67c03dc5c393599a5ca2b35d538fce9c3a The package testhaus was found to contain malicious code...

Over 2,000 Fake Shopping Sites Spotted Before Cyber Monday

CloudSEK found over 2,000 fake sites impersonating Amazon and top brands before Cyber Monday and Black Friday. Learn the key fraud signs now to stay safe...

CVE-2025-64715

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

PT-2025-48349

Name of the Vulnerable Software and Affected Versions Cilium versions prior to 1.16.17 Cilium versions prior to 1.17.10 Cilium versions prior to 1.18.4 Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. CiliumNetworkPolicys utilizing...

Holiday shoppers targeted as Amazon and FBI warn of surge in account takeover attacks

The FBI has issued a public service announcement warning about a surge in account takeover ATO fraud, and the timing lines up with a major alert Amazon has just sent to its 300 million customers about brand impersonation scams. How ATO fraud works Account takeover fraud is just what it says:...

CVE-2022-37055

creationtimestamp| type| source ---|---|--- 2025-11-27 11:52:43+00:00| seen| https://threatintel.cc/2025/11/27/botnet-takes-advantage-of-aws.html 2025-11-27 12:52:30+00:00| seen| https://infosec.exchange/users/edwardk/statuses/115621753678740046 2025-11-27 15:20:22+00:00| seen|...

ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories

Hackers have been busy again this week. From fake voice calls and AI-powered malware to huge money-laundering busts and new scams, there's a lot happening in the cyber world. Criminals are getting creative — using smart tricks to steal data, sound real, and hide in plain sight. But they're not th...

CVE-2025-65073

A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS Amazon Web Services signature to the /v3/ec2tokens ...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:4244-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

openSUSE Security Advisory (SUSE-SU-2025:4191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2025:4191-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4191-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key...

ROS-20251125-05

A vulnerability in HashiCorp's Vault and Vault Enterprise enterprise information archiving platforms is related to authentication bypass using an alternate path or channel in AWS authentication method AWS authentication method. Exploitation of the vulnerability could allow an attacker acting...