MAL-2025-3828 Malicious code in fastifiyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3da19b8f86e82a5ab61d8134531f7e1f001bf858555808eca76c3f03deeff06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile

CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM...

MAL-2025-3831 Malicious code in helvetia-base-patterns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682a1cff47d9425b9d7c8d820704387f078a2f5ee4dadc955da09c859c23579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4564

creationtimestamp| type| source ---|---|--- 2025-05-15 11:36:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16461 2025-05-15 14:33:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7q7r4ob62r...

CVE-2025-31929

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket 8EM1310-2EH04-0GA0 All versions, IEC 1Ph 7.4kW Child socket/ shutter 8EM1310-2EN04-0GA0 All versions, IEC 1Ph 7.4kW Parent cable 7m 8EM1310-2EJ04-3GA1 All versions, IEC 1Ph 7.4kW Parent cable 7m incl. SIM 8EM1310-2EJ04-3GA2 All...

MAL-2025-3857 Malicious code in testqwee57985 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3598ee25e4c608f570194a3c2f83121f1978733f81ee019895ec855b7acd8a48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3841 Malicious code in my-worker-with-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cecbb57d34a074c40db552b59c6f1a08a5571d2a39cfdce21503791d9a563e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3829 Malicious code in fca-shaon-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3447878cef2f81b5cf93c10db61caf84d11600727979b580e0f7611302bb645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3827 Malicious code in ethers-xdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1291aba3d0c0f6309af00246cdf38a846604fabf82d9cc352bf51f42517b0e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A Survey of Learning-Based Intrusion Detection Systems for In-Vehicle Network

Connected and Autonomous Vehicles CAVs enhance mobility but face cybersecurity threats, particularly through the insecure Controller Area Network CAN bus. Cyberattacks can have devastating consequences in connected vehicles, including the loss of control over critical systems, necessitating robus...

DataSentinel: a Game-Theoretic Detection of Prompt Injection Attacks

LLM-integrated applications and agents are vulnerable to prompt injection attacks, where an attacker injects prompts into their inputs to induce attacker-desired outputs. A detection method aims to determine whether a given input is contaminated by an injected prompt. However, existing detection...

ChestyBot: Detecting and Disrupting Chinese Communist Party Influence Stratagems

Foreign information operations conducted by Russian and Chinese actors exploit the United States' permissive information environment. These campaigns threaten democratic institutions and the broader Westphalian model. Yet, existing detection and mitigation strategies often fail to identify active...

AttentionGuard: Transformer-Based Misbehavior Detection for Secure Vehicular Platoons

Vehicle platooning, with vehicles traveling in close formation coordinated through Vehicle-to-Everything V2X communications, offers significant benefits in fuel efficiency and road utilization. However, it is vulnerable to sophisticated falsification attacks by authenticated insiders that can...

MAL-2025-3788 Malicious code in f0-flow-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c42aceb0889ce5fb0fad4c698354a5a1df80d9432c36717c49a273f233cc9cf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-6P48-74J9-977J

creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...

MAL-2025-3797 Malicious code in node-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ace3ab879582927c692b2b5cc3006afb79d6853935e6feb933e544a35260ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3789 Malicious code in aiide-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f87105b04445846be4b509793882c19f03cc302b5a62c868a7f5bc603d6ca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Evaluating the Robustness of Adversarial Defenses in Malware Detection Systems

Machine learning is a key tool for Android malware detection, effectively identifying malicious patterns in apps. However, ML-based detectors are vulnerable to evasion attacks, where small, crafted changes bypass detection. Despite progress in adversarial defenses, the lack of comprehensive...

Cybersecurity Threat Detection Based on a UEBA Framework Using Deep Autoencoders

User and Entity Behaviour Analytics UEBA is a broad branch of data analytics that attempts to build a normal behavioural profile in order to detect anomalous events. Among the techniques used to detect anomalies, Deep Autoencoders constitute one of the most promising deep learning models on UEBA...

Guardian Positioning System (GPS) for Location Based Services

Location-based service LBS applications proliferate and support transportation, entertainment, and more. Modern mobile platforms, with smartphones being a prominent example, rely on terrestrial and satellite infrastructures e.g., global navigation satellite system GNSS and crowdsourced Wi-Fi,...