The vulnerability of the pgtable component in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the pgtable component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the iavfremove function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the iavfremove function in Linux operating systems is related to improper release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf_helper_changes_pkt_data function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpfhelperchangespktdata function in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the kernel component in Linux operating systems, which allows a hacker to cause a system failure

The vulnerability of the kernel component in Linux operating systems is related to integer overflows. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the arm64 component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Viasat and the terrible, horrible, no good, very bad day

Welcome to this week's edition of the Threat Source newsletter. A year ago, fresh off a layoff, I never would have guessed I'd be spending Halloween weekend bouncing between conversations about space policy, satellite hacking, and wedding plans. That's exactly what happened when my space analyst...

MAL-2025-172201 Malicious code in augis-po9r-nomina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae74cf90a1adba4a42a6e3b5d8e5d7232186ef501d76c52ec0dd8e9ced2000b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Security Advisory: idm:DL1 security update

An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

The vulnerability of the VoiceOver component („Special Features“) in iOS and iPadOS operating systems, which allows a hacker to disclose protected information or cause a service failure

The vulnerability of VoiceOver “Special Features” in iOS and iPadOS operating systems is related to weak cryptography for passwords. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

The vulnerability of AnyDesk’s remote access and management software lies in buffer overflow attacks in its dynamic memory. This allows attackers to trigger a service failure.

The vulnerability of AnyDesk remote access and management software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

MAL-2025-103640 Malicious code in helpful_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044e9e57b00aff3484b6ad9f108bdcc26715b6b67c1e353a2d30874868806ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e59ce1f76e369f6f80f205637fcf98dfb762514b8ef3d2e4f9c9feedff597bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89923 Malicious code in reliable_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3a1dfd524b609e3664a9cab6e54b4a354c2bb41422207ddb704f31252d682d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly-salmon-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebbef619ca17a4e595a1f2a7b7ac82288ef753032796d06a4e1936af66be667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67178 Malicious code in chosen-lime-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1328f512e5f3b3537c9ce44f62d52e3ddd47dac95df8b72e4f8dccb3bdcdfc83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

The vulnerability of the copy_mnt_ns() function in the fs/namespace.c module of the Linux kernel’s file system support module allows a attacker to cause a service failure.

The vulnerability of the copymntns function in the fs/namespace.c module of the Linux file system support module is related to improper cleanup during exception handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the bpf_parse_param() function in the kernel/bpf/inode.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bpfparseparam function in the kernel/bpf/inode.c module of the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...