CVE-2024-47546 GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extractccfromdata function within qtdemux.c. In the FOURCCc708 case, the subtraction atomlength - 8 may result in an underflow if atomlength is less than 8. When that subtraction...

New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools

A newly devised technique leverages a Windows accessibility framework called UI Automation UIA to perform a wide range of malicious activities without tipping off endpoint detection and response EDR solutions. "To exploit this technique, a user must be convinced to run a program that uses UI...

Qualys Achieves 100% Major Step Detection in the 2024 MITRE ATT&CK Evaluations, Enterprise

How Qualys Transformed from Risk Leader to EDR Powerhouse In today’s rapidly evolving threat landscape, ransomware continues to dominate as one of the most significant cybersecurity challenges. To help organizations evaluate their defenses against these sophisticated threats, the MITRE ATT&CK...

MAL-2024-11816 Malicious code in test-wasim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca87e0cafeb997e2bef07223871aafe4ac98437de23d3ff89ed5bb5ae2d1612 The OpenSSF Package Analysis project identified 'test-wasim' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Fedora: Security Advisory (FEDORA-2024-bcdea6e995)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Access 2016 RCE Vulnerability (KB5002641)

This host is missing an important security update according to Microsoft KB5002641. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Windows Multiple Vulnerabilities (KB5048652)

This host is missing an important security update according to Microsoft KB5048652 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2016 RCE Vulnerability (KB5002660)

This host is missing an important security update according to Microsoft KB5002660 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5048685)

This host is missing an important security update according to Microsoft KB5048685 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Ubuntu: Security Advisory (USN-7141-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 22 for SLE 15 SP4) (SUSE-SU-2024:4276-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in detection-rules-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b2dc0e1b956b76c550587e90653267b618f257e8f5243aa8df3c04b3002e89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11759 Malicious code in detection-rules-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b2dc0e1b956b76c550587e90653267b618f257e8f5243aa8df3c04b3002e89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11757 Malicious code in dexter123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92153d5ec8ca742a1abda5dd5a05def8deace56614101ebb7f38980a9583769a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ongoing Phishing and Malware Campaigns in December 2024

Cyber attackers never stop inventing new ways to compromise their targets. That's why organizations must stay updated on the latest threats. Here's a quick rundown of the current malware and phishing attacks you need to know about to safeguard your infrastructure before they reach you. Zero-day...

Ubuntu: Security Advisory (USN-7146-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 21 for SLE 15 SP4) (SUSE-SU-2024:4265-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-12148 Malicious code in jekyll-doxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc397fffef5e9f788df267304bc1d6a1889066148532360fd247d8852cc0050d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11755 Malicious code in @neo-ds/neo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d3d5e2f6b432e3a4491b74a6c06d176dcf93aa9cf419db326cea281b530044b The OpenSSF Package Analysis project identified '@neo-ds/neo-utils' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11773 Malicious code in playwright-1.46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b54a73f91f92e3252ca7711496e9a2cc0e1eabd2637f94a2bfdce96d1a94791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...