Identifying a DNS Exfiltration Attack That Wasn’t Real — This Time

A recent red team DNS exfiltration alert confirms that Akamai Secure Internet Access is an effective security tool for this type of detection and analysis...

New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection

Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under specific conditions. "This vulnerability allows a remote attacker to potentially execute arbitrary commands on vulnerable OpenSSH's forwarded...

MAL-2023-1086 Malicious code in @mendeley-internal/react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4b3c54bd49a9cb3df935485579edbec49aa244d45e1a1f0535ceb9ee0c278871 The OpenSSF Package Analysis project identified '@mendeley-internal/react-ui' @ 100.0.1 npm as malicious. It is considered malicious because: -...

copyparty vulnerable to reflected cross-site scripting via hc parameter

Summary The application contains a reflected cross-site scripting via URL-parameter ?hc=... Details A reflected cross-site scripting XSS vulnerability exists in the web interface of the application that could allow an attacker to execute malicious javascript code by tricking users into accessing ...

Azure AD Token Forging Technique in Microsoft Attack Extends Beyond Outlook, Wiz Reports

The recent attack against Microsoft's email infrastructure by a Chinese nation-state actor referred to as Storm-0558 is said to have a broader scope than previously thought. According to cloud security company Wiz, the inactive Microsoft account MSA consumer signing key used to forge Azure Active...

Malicious code in policycms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6fcf99ac2d853174c6d17fd728c94d9fd33306bddfc79312ba47ffe026e42606 The OpenSSF Package Analysis project identified 'policycms' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

NYPD Body Cam Data Shows the Scale of Violence Against Protesters

A landmark $13 million settlement with the City of New York is the latest in a string of legal wins for protesters who were helped by a video-analysis tool that smashes the “bad apple” myth...

CVE-2023-38334

Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis...

MAL-2023-1275 Malicious code in puppeteer-kibana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71d9107e3aa60e76e79bc81d61da3e8f02cbb8805c5f5d616addaf90b65584fe The OpenSSF Package Analysis project identified 'puppeteer-kibana' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Updated Researcher Portal Submission Form: Discover the New Fields in the Submission Form

Summary: We are excited to announce the release of the updated Researcher Portal submission form. These new fields allow Security Researchers to provide additional context for the reported security issue, providing product teams with more data for analysis, gain insights and identify trends acros...

MAL-2023-1088 Malicious code in @metronetinc/react-component-library-next-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d29aaa8c56838993a54df9b7ee45362f439f4b704ca467383c14f4643e2151a9 The OpenSSF Package Analysis project identified '@metronetinc/react-component-library-next-plugin' @ 9.999.8 npm as malicious. It is considered...

MAL-2023-1087 Malicious code in @metronetinc/react-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60618ba400c79770b18a43c36d0b3b9723c5f4df204ac012d6aea96d17de5bdd The OpenSSF Package Analysis project identified '@metronetinc/react-component-library' @ 9.999.8 npm as malicious. It is considered malicious...

The vulnerability of the Protobuf field analysis component allows a attacker to cause a service failure.

The vulnerability of the Protobuf serialization protocol field analysis component is related to performing actions in the wrong order. Exploiting this vulnerability allows a remote attacker to cause service failures...

The vulnerability of the Protobuf serialization protocol’s text analysis component, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Protobuf serialization protocol’s text analysis component is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service failures...

Malicious code in uber-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a520e43e8c3f5918ff525c55f9b99a1715b3b4d89e3596cc698e7954e2bc7e63 The OpenSSF Package Analysis project identified 'uber-eslint' @ 99.99.992 npm as malicious. It is considered malicious because: - The package...

Q2-2023 API ThreatStats™ Report: API Exploits Are Everywhere: from NVIDIA to Reddit and more!

Our Q2-2023 API ThreatStats™ report is out. It provides API builders, defenders, breakers, and decision-makers with a comprehensive look at the API security vulnerabilities, threats and exploits reported this past quarter. This report provides everyone involved in API development, security and...

Exploring the Dark Side: OSINT Tools and Techniques for Unmasking Dark Web Operations

On April 5, 2023, the FBI and Dutch National Police announced the takedown of Genesis Market, one of the largest dark web marketplaces. The operation, dubbed "Operation Cookie Monster," resulted in the arrest of 119 people and the seizure of over $1M in cryptocurrency. You can read the FBI's...

MAL-2023-1097 Malicious code in @optalp/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2be61ba56fbca0d8199a70e1257f274b56d233dfc2edd33b2fc29ab7b2a8446a The OpenSSF Package Analysis project identified '@optalp/test-package' @ 1.0.6 npm as malicious. It is considered malicious because: - The packa...

Rockwell Automation Kinetix 5700 DC Bus Power Supply

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Kinetix 5700 Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service attack...

GeoVision GV-ADR2701

1. EXECUTIVE SUMMARY ​CVSS v3 9.8 ​ATTENTION: Exploitable remotely/low attack complexity/public exploits are available ​Vendor: GeoVision ​Equipment: GV-ADR2701 ​Vulnerabilities: Improper Authentication 2. RISK EVALUATION ​Successful exploitation of this vulnerability could allow an attacker to...