Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9558: MDR: Post-upgrade 4.21 to 4.22 DRPolicy validation failure in Metro DR DFBUGS-9404: Backport to...

[SECURITY] [DLA 4706-2] ruby-grape regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 19, 2026 https://wiki.debian.org/LTS -...

Malicious code in evm-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c551a6031e48a54b550a604e2198a4491cf935407744bba8ef0c11c54086c4 The package advertises EVM address validation but performs no local validation. Its single exported function validatede in index.js issues axios.get...

MAL-2026-14301 Malicious code in evm-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c551a6031e48a54b550a604e2198a4491cf935407744bba8ef0c11c54086c4 The package advertises EVM address validation but performs no local validation. Its single exported function validatede in index.js issues axios.get...

Malicious code in eth-react-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9bdf79a694cbf6d1a840541b4c47fdac8dc6ac32f4b6a3d4887d5f81233387 The package advertises itself as a React Ethereum provider exporting EthereumProvider/useProvider/useSigner/useNetwork hooks, but the shipped main...

MAL-2026-14300 Malicious code in eth-react-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9bdf79a694cbf6d1a840541b4c47fdac8dc6ac32f4b6a3d4887d5f81233387 The package advertises itself as a React Ethereum provider exporting EthereumProvider/useProvider/useSigner/useNetwork hooks, but the shipped main...

Malicious code in emoji-prints-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163576a0a8b626c88261c8cc54c5049d981015c80145ad36e2710fff5014afbe The package advertises itself as a colorized logger, but dist/index.js requires./logger, which at module load AES-256-CBC-decrypts a hardcoded...

MAL-2026-14298 Malicious code in emoji-prints-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163576a0a8b626c88261c8cc54c5049d981015c80145ad36e2710fff5014afbe The package advertises itself as a colorized logger, but dist/index.js requires./logger, which at module load AES-256-CBC-decrypts a hardcoded...

Exploit for CVE-2026-47858

CVE-2026-47858 Replay Experiment Record Vulnerability: Sp...

Describing attacks with crime script analysis

Crime script analysis is a narrative-driven technique that can be used alongside, or as an alternative to, tactics, techniques, and procedures TTPs -- creating human-readable stories that describe attacks in a way non-technical audiences can understand. By analyzing the attacker's workflow, we ca...

SUSE-SU-2026:3649-1 Security update for python313

This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. - CVE-2025-15367: control characters may allow the injection of additional commands bsc1257041. - CVE-2026-0864: improper handling of...

Security update for python313

This update for python313 fixes the following issues: CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. CVE-2025-15367: control characters may allow the injection of additional commands bsc1257041. CVE-2026-0864: improper handling of...

Malicious code in gear-composer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f697d2d145e4ade11da0d34433b5f69b46fde8736031c5ffe63af4d2f843eaad The package ships multiple components consistent with an install-time credential harvest and exfiltration pipeline. scripts/postinstall-agent.mjs is...

MAL-2026-14299 Malicious code in gear-composer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f697d2d145e4ade11da0d34433b5f69b46fde8736031c5ffe63af4d2f843eaad The package ships multiple components consistent with an install-time credential harvest and exfiltration pipeline. scripts/postinstall-agent.mjs is...

CVE-2026-76037

A flaw was found in Google Chrome. A local attacker could exploit a link following vulnerability within the CredentialProvider component. This vulnerability allows for the execution of arbitrary code outside the browser's security sandbox through a local program. Mitigation Mitigation for this...

Your polite reply to that text is worth $2 on the dark web

Most wrong-number texts are harmless. Some are the first step in a carefully planned scam. By replying, you may be confirming that your number is active and that you're willing to engage with strangers, making you a more valuable target for future fraud. Here's why a polite response can be worth...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.43 security and extras update

Red Hat OpenShift Container Platform release 4.19.43 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Malicious code in homekit-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aae79beeec5e53410060b09eae14979ac2c1f27c62da6b750a612651f8ea8fe The package is published under a HomeKit/MCP-suggestive name but contains no HomeKit or MCP functionality. lib/report.js resolves the installer's ema...

MAL-2026-14297 Malicious code in homekit-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aae79beeec5e53410060b09eae14979ac2c1f27c62da6b750a612651f8ea8fe The package is published under a HomeKit/MCP-suggestive name but contains no HomeKit or MCP functionality. lib/report.js resolves the installer's ema...

BIT-MONGODB-2026-13072 MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...