Attackers are Working Around The Clock. Luckily, So Are We.

It takes an average of 204 days for organizations to discover a breach, and from there an average of 73 days to contain it. With the average cost of a breach at an all time high of $4.45 million IBM’s Cost of a Data Breach Report 2023, there’s an undeniable need for teams to enlist the right...

7 Uses for Generative AI to Enhance Security Operations

Welcome to a world where Generative AI revolutionizes the field of cybersecurity. Generative AI refers to the use of artificial intelligence AI techniques to generate or create new data, such as images, text, or sounds. It has gained significant attention in recent years due to its ability to...

How to identify VRID Conflicts.

Explain VRID conflicts and how to identify them...

The vulnerability relates to the AV1 parser for subtitle analysis, subparse, and the Gstreamer multimedia framework. This allows attackers to execute arbitrary code.

The vulnerability of the AV1 codec parser, subtitles analysis module, and subparse in the Gstreamer multimedia framework is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

MAL-2023-8636 Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

CVE-2023-5717

creationtimestamp| type| source ---|---|--- 2023-11-29 17:11:18+00:00| seen| https://t.me/arpsyndicate/775 2024-11-16 23:00:00+00:00| seen| https://u1f383.github.io/linux/2024/11/17/linux-kernel-perf-cve-2023-5717-quick-analysis.html 2024-11-30 15:50:41+00:00| published-proof-of-concept|...

Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability

Google has rolled out security updates to fix seven security issues in its Chrome browser, including a zero-day that has come under active exploitation in the wild. Tracked as CVE-2023-6345, the high-severity vulnerability has been described as an integer overflow bug in Skia, an open source 2D...

Malicious code in topcoderhomepage_3.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a918cae24042a2081d6c6149a7791e973357063dd7292f59ac3d9b32d9561974 The OpenSSF Package Analysis project identified 'topcoderhomepage3.0' @ 1.0.2 npm as malicious. It is considered malicious because: - The packag...

Secret White House Warrantless Surveillance Program

There seems to be no end to warrantless surveillance: According to the letter, a surveillance program now known as Data Analytical Services DAS has for more than a decade allowed federal, state, and local law enforcement agencies to mine the details of Americans’ calls, analyzing the phone record...

Closing the Visibility Gap: How Qualys Cloud Agent Passive Sensor (CAPS) Eliminates Blind Spots Without the Hassle

In modern networks, the most significant risks come from systems that fall through the cracks. Modern networks are full of unknown and unmanaged assets. Some are seemingly benign devices introduced by well-meaning employees or contractors that can turn rogue. While some of these may be genuinely...

Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8619 Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gog-module-event-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4fb2c212daa3b898b2df5ffdf458a7751515e92268bd6b3b13ac45894235be3c The OpenSSF Package Analysis project identified 'gog-module-event-bus' @ 1.0.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-8607 Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails

Delivery- and shipping-themed email messages are being used to deliver a sophisticated malware loader known as WailingCrab. "The malware itself is split into multiple components, including a loader, injector, downloader and backdoor, and successful requests to C2-controlled servers are often...

GHSA-4JQ9-2XHW-JPX7

creationtimestamp| type| source ---|---|--- 2023-11-22 17:42:16+00:00| seen| https://t.me/arpsyndicate/362 2023-11-26 20:59:17+00:00| published-proof-of-concept| https://t.me/AnonGhostIndonesiaforum/128 2025-07-16 03:12:23+00:00| seen|...

Biden's AI Executive Order: What it says, and what it means for security teams

The 2023 Executive Order has far-reaching implications for companies relying on AI. Here is a breakdown of it through the lens of a Security Engineer, including an analysis, a summary of the impact on AI safety and privacy protection, and a look at how the order will affect security teams...

LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

Multiple threat actors, including LockBit ransomware affiliates, are actively exploiting a recently disclosed critical security flaw in Citrix NetScaler application delivery control ADC and Gateway appliances to obtain initial access to target environments. The joint advisory comes from the U.S...

Malicious code in primarycare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f127bd23e5c409b4d729767fb6df0fade7da73e67b9bf12303c53330c7970280 The OpenSSF Package Analysis project identified 'primarycare' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8556 Malicious code in primarycare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f127bd23e5c409b4d729767fb6df0fade7da73e67b9bf12303c53330c7970280 The OpenSSF Package Analysis project identified 'primarycare' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...