Why You Need Network Detection & Response Now

Cybersecurity teams are well-equipped to handle threats to technology assets that they manage. But with unmanaged devices providing ideal spots for attackers to lurk unseen, network detection and response capabilities have become vitally important...

Blueprint for Success: Implementing a CTEM Operation

The attack surface isn't what it once was and it's becoming a nightmare to protect. A constantly expanding and evolving attack surface means risk to the business has skyrocketed and current security measures are struggling to keep it protected. If you've clicked on this article, there's a good...

Malicious code in font-assets (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6913 Malicious code in font-assets (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in assets-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in assets-live_compile (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in assets-offline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6705 Malicious code in assets-live_compile (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vis-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3828 Malicious code in vis-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3054 Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sq-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3041 Malicious code in sq-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gp-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2429 Malicious code in gp-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

Crypto exchange Kraken revealed that an unnamed security researcher exploited an "extremely critical" zero-day flaw in its platform to steal $3 million in digital assets and refused to return them. Details of the incident were shared by Kraken's Chief Security Officer, Nick Percoco, on X formerly...

Improper Access Control

silverstripe/framework is vulnerable to Improper Access Control. The vulnerability is due to a weakness in the .htaccess rules preventing requests to uploaded PHP scripts, which allows PHP scripts in the assets directory to be executed via a specially crafted URL...

CVE-2024-29168

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing...

PT-2024-22775 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.22.00.00 Description: The issue concerns a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this, leading to the execution of...