198 matches found
EUVD-2025-60259
Malicious code in comprehensivesquirrelz3n npm...
EUVD-2025-50530
Malicious code in comprehensivelandfowlz3n npm...
EUVD-2025-50531
Malicious code in comprehensivekitez3n npm...
VulnCheck KEV: CVE-2024-58274
Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...
Toward Understanding Security Issues in the Model Context Protocol Ecosystem
The Model Context Protocol MCP is an emerging open standard that enables AI-powered applications to interact with external tools through structured metadata. A rapidly growing ecosystem has formed around MCP, including a wide range of MCP hosts i.e., Cursor, Windsurf, Claude Desktop, and Cline, M...
Beyond a Single Perspective: Towards a Realistic Evaluation of Website Fingerprinting Attacks
Website Fingerprinting WF attacks exploit patterns in encrypted traffic to infer the websites visited by users, posing a serious threat to anonymous communication systems. Although recent WF techniques achieve over 90% accuracy in controlled experimental settings, most studies remain confined to...
xss-security-scanner
XSS Security Scanner A professional web-based XSS vulnerabili...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433 – Erlang/OTP SSH RCE Vulnerability 📌 Summary...
LMDG: Advancing Lateral Movement Detection through High-Fidelity Dataset Generation
Lateral Movement LM attacks continue to pose a significant threat to enterprise security, enabling adversaries to stealthily compromise critical assets. However, the development and evaluation of LM detection systems are impeded by the absence of realistic, well-labeled datasets. To address this...
CISA and USCG Issue Joint Advisory to Strengthen Cyber Hygiene in Critical Infrastructure
CISA, in partnership with the U.S. Coast Guard USCG, released a joint Cybersecurity Advisory aimed at helping critical infrastructure organizations improve their cyber hygiene. This follows a proactive threat hunt engagement conducted at a U.S. critical infrastructure facility. During this...
PurpCode: Reasoning for Safer Code Generation
We introduce PurpCode, the first post-training recipe for training safe code reasoning models towards generating secure code and defending against malicious cyberactivities. PurpCode trains a reasoning model in two stages: i Rule Learning, which explicitly teaches the model to reference cybersafe...
How Microsoft Defender for Endpoint is redefining endpoint security
Securing your digital estate with endpoint detection and response EDR across all platforms, devices, and Internet of Things IoT has never been more challenging. A rapidly evolving cyberthreat landscape has seen cyberattacks grow in sophistication, evolving from randomized single domain cyberattac...
CVE-2023-41896
Home assistant is an open source home automation. Whilst auditing the frontend code to identify hidden parameters, Cure53 detected authcallback=1, which is leveraged by the WebSocket authentication logic in tandem with the state parameter. The state parameter contains the hassUrl, which is...
Memory under Siege: a Comprehensive Survey of Side-Channel Attacks on Memory
Whitepaper called Memory Under Siege: A Comprehensive Survey Of Side-Channel Attacks On Memory...
Azure Linux 3.0 Security Update: kernel (CVE-2025-21764)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21764 advisory. - In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndiscallocs...
SoK: Timeline Based Event Reconstruction for Digital Forensics: Terminology, Methodology, and Current Challenges
Event reconstruction is a technique that examiners can use to attempt to infer past activities by analyzing digital artifacts. Despite its significance, the field suffers from fragmented research, with studies often focusing narrowly on aspects like timeline creation or tampering detection. This...
The Exposure Validation Revolution: From Hoping to Knowing
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on the Exposure Validation Revolution! Imagine your security team...
Unlocking the Power of MetaTrader – Your Ultimate Trading Tool
MetaTrader is a key tool for traders, offering a comprehensive platform that supports various financial instruments. Understanding its…...
Secure Your Attack Surface: Key Findings from IDC's 2024 Spotlight Report
Rapid7 recently collaborated with IDC on their comprehensive Attack Surface Management Spotlight guide. These Spotlight publications deliver expert analyst perspectives on critical business and technology challenges, emerging industry trends, and innovative solutions. We're pleased to share IDC...
