Polyfill.io Supply Chain Attack: Malicious JavaScript Injection Puts Over 100k Websites At Risk

Polyfill.io helps web developers achieve cross-browser compatibility by automatically managing necessary polyfills. By adding a script tag to their HTML, developers can ensure that features like JavaScript functions, HTML5 elements, and various APIs work across different browsers. Originally...

SUSE: Security Advisory (SUSE-SU-2024:2371-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell DRAC / iDRAC Detection Consolidation

Consolidation of Dell Remote Access Controller DRAC / Integrated Remote Access Controller iDRAC detections. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Exploit for Improper Privilege Management in Progress Whatsup_Gold

CVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escala...

Developing and prioritizing a detection engineering backlog based on MITRE ATT&CK

Detection is a traditional type of cybersecurity control, along with blocking, adjustment, administrative and other controls. Whereas before 2015 teams asked themselves what it was that they were supposed to detect, as MITRE ATT&CK evolved, SOCs were presented with practically unlimited space for...

New Golang Botnet “Zergeca” Discovered, Delivers Brutal DDoS Attacks

New Golang botnet "Zergeca" evades detection and launches DDoS attacks. Ensure your IoT devices are fully patched against…...

Siemens SIMATIC 安全漏洞

SIMATIC Energy Manager provides users with a scalable, non-industry-specific energy data management system.SIMATIC IPC DiagBase diagnostic software provides early identification of any potential faults on SIMATIC industrial controllers and helps to avoid or reduce system downtime.SIMATIC IPC...

Why You Need Network Detection & Response Now

Cybersecurity teams are well-equipped to handle threats to technology assets that they manage. But with unmanaged devices providing ideal spots for attackers to lurk unseen, network detection and response capabilities have become vitally important...

Network detection & response: the SOC stress reliever

Cybersecurity teams are well-equipped to handle threats to technology assets that they manage. But with unmanaged devices providing ideal spots for attackers to lurk unseen, network detection and response capabilities have become vitally important...

Rapid7 completes IRAP PROTECTED assessment for Insight Platform solutions

Exciting news from Australia! Rapid7 has successfully completed an Information Security Registered Assessors Program IRAP assessment to PROTECTED Level for several of our Insight Platform solutions. What is IRAP? An IRAP assessment is an independent assessment of the implementation,...

CVE-2024-34603

creationtimestamp| type| source ---|---|--- 2024-07-08 09:53:56+00:00| seen| https://t.me/cvedetector/172...

Ubuntu: Security Advisory (USN-6870-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Path Traversal in Splunk

CVE-2024-36991: Path traversal that affects Splunk Enterprise...

Exploit for Code Injection in Geoserver

CVE-2024-36401: GeoServer Unauthenticated Remote Code Executio...

HuggingFace Git Repo Detection for Linux/UNIX

Binary data huggingfacegitdetectnix.nbin...

Juniper Session Smart Router Detection

Binary data junipersessionsmartrouterversion.nbin...

CVE-2024-5943

creationtimestamp| type| source ---|---|--- 2024-07-04 15:10:24+00:00| seen| https://t.me/cvedetector/52...

MAL-2024-7301 Malicious code in @zitterorg/nostrum-porro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75ba4349d9cf12394e1cc37838cb968603cf8922a8726f9d8b5d11bfde099deb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7340 Malicious code in @zitterorg/quasi-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20f6a4592f0557258ab1a57552b4a83fbe1cf605de22c693c05db453403fddd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7413 Malicious code in @zitterorg/voluptatibus-praesentium-molestiae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3545ce7cf35e36da412a76fb43363e11dd6d519ed16689387fee36ead744e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...