MAL-2025-19197 Malicious code in ecosystem-jellyfish-umz952-project (npm)

The package ecosystem-jellyfish-umz952-project was found to contain malicious code...

MAL-2025-22436 Malicious code in hill-ecosystem-kdd949-project (npm)

The package hill-ecosystem-kdd949-project was found to contain malicious code...

MAL-2025-19200 Malicious code in ecosystem-opal-lxo696-project (npm)

The package ecosystem-opal-lxo696-project was found to contain malicious code...

MAL-2025-37994 Malicious code in utopia-ecosystem-csh952-project (npm)

The package utopia-ecosystem-csh952-project was found to contain malicious code...

MAL-2025-19204 Malicious code in ecosystem-uranium-fsi579-project (npm)

The package ecosystem-uranium-fsi579-project was found to contain malicious code...

MAL-2025-27503 Malicious code in night_akr3h_os9hy_serenade (npm)

The package nightakr3hos9hyserenade was found to contain malicious code...

MAL-2025-14843 Malicious code in aroma-ecosystem-gsn760-project (npm)

The package aroma-ecosystem-gsn760-project was found to contain malicious code...

Malicious code in ecosystem-violet-xqw050-project (npm)

The package ecosystem-violet-xqw050-project was found to contain malicious code...

Malicious code in ecosystem-rainbow-xym443-project (npm)

The package ecosystem-rainbow-xym443-project was found to contain malicious code...

Malicious code in ecosystem-meadow-dye920-project (npm)

The package ecosystem-meadow-dye920-project was found to contain malicious code...

Malicious code in hill-ecosystem-kdd949-project (npm)

The package hill-ecosystem-kdd949-project was found to contain malicious code...

Malicious code in aroma-ecosystem-gsn760-project (npm)

The package aroma-ecosystem-gsn760-project was found to contain malicious code...

Moderate: Red Hat Security Advisory: Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog

Updated rhceph-7.1 container image is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...

Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

Cybersecurity researchers have discovered a set of 11 malicious Go packages that are designed to download additional payloads from remote servers and execute them on both Windows and Linux systems. "At runtime the code silently spawns a shell, pulls a second-stage payload from an interchangeable...

Privacy Risk Predictions Based on Fundamental Understanding of Personal Data and an Evolving Threat Landscape

It is difficult for individuals and organizations to protect personal information without a fundamental understanding of relative privacy risks. By analyzing over 5,000 empirical identity theft and fraud cases, this research identifies which types of personal data are exposed, how frequently...

Gang Wars: Breaking Trust Among Cyber Criminals

Gang Wars: Breaking Trust Among Cyber Criminals By John Fokker and Jambul Tologonov · August 5, 2025 Introduction In the final, unforgettable scene of the film Reservoir Dogs , a group of criminals — once united by a common goal — stand in a Mexican standoff, guns drawn, hearts pounding. Suspicio...

Attractive Metadata Attack: Inducing LLM Agents to Invoke Malicious Tools

Large language model LLM agents have demonstrated remarkable capabilities in complex reasoning and decision-making by leveraging external tools. However, this tool-centric paradigm introduces a previously underexplored attack surface: adversaries can manipulate tool metadata -- such as names,...

Celebrating 200 WINtegrations—and the Partners Who Make It Possible

200 integrations strong: How our open ecosystem is redefining cloud security collaboration...

Important: Red Hat Security Advisory: 7.1 container image is now available in the Red Hat Ecosystem Catalog.

Updated rhceph-7.1 container image is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...

Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data

The Model Context Protocol MCP represents a significant advancement in AI-tool integration, enabling seamless communication between AI agents and external services. However, this connectivity introduces novel attack vectors that remain largely unexplored. This paper demonstrates how unsophisticat...