MAL-2026-17407 Malicious code in syncxbails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17388 Malicious code in baileys-xbats (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17356 Malicious code in @ikyyjee/ikkysingle (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17373 Malicious code in @queenanya/baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17408 Malicious code in whalibmob (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17390 Malicious code in cantarella-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17414 Malicious code in yonzofficial (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17349 Malicious code in @bellaxchuu/velvetry (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17345 Malicious code in @bellaxchuu/flowblue (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17406 Malicious code in spencer-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17385 Malicious code in albert-anitabaileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

CVE-2026-102510

Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache PLC4X PLC4Go allow a malicious device, or an attacker able to inject network traffic, to crash or exhaust the memory of the client...

ResetSpy

ResetSpy Microsoftのセルフサービスパスワードリセット（SSPR）エンドポイントをプローブし、登録済みの確認方法を列挙して、強力な第二要素を欠くものをフラグ付けします。ユーザー列挙と、Entraアカウント全体のMFA態勢の概算を提供します。 !NOTE 2026年8月現在、MicrosoftはSSPRフローからレガシーCAPTCHAを削除し、バックエンドのスロットリングと行動ベースの不正利用検知に置き換えました（MC1400824を参照）。Microsoftの立場は、バックエンドの制御が自動化された不正利用を検知・ブロックするのに十分であるというものです。 目次 インスト...

8 Top Red Teaming Service Providers for Enterprise Adversary Emulation

Compare 8 top red teaming providers for enterprise adversary emulation, from DeepSeas and Mandiant to CrowdStrike, IBM, SpecterOps, TrustedSec and NCC Group...

Codeguard-copilot

CodeGuard Copilot — インテリジェント・セキュリティ・エコシステム AI搭載のセキュリティ・ガーディアン — ライブ攻撃者インテリジェンスに接続 機能 • アーキテクチャ • Raven連携 • インストール • ロードマップ • コントリビューション CodeGuard Copilotとは？ CodeGuard Copilotは、コミット後ではなくコーディング中に セキュリティ脆弱性を検出します。決定論的な正規表現パターン検出と、AIによる深層分析、そしてRaven/WraithWallエコシステムからのライブ攻撃者インテリジェンスを組み合わせることで、他のどのVS...

Vulnerabilities in NetScaler ADC and NetScaler Gateway

Citrix has identified 8 vulnerabilities in NetScaler ADC and NetScaler Gateway. The following supported versions of Citrix NetScaler ADC and Citrix NetScaler Gateway are vulnerable: - Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 before version 14.1-73.37 - Citrix NetScaler ADC and Citri...

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group GTIG in September 2026...

external_expat_2.1.0_CVE-2022-43680

Expat、リリース 2.1.0 これは、James Clark によって書かれた、XML を解析するための C ライブラリである Expat です。 Expat はストリーム指向 XML パーサーです。つまり、パースを開始する前にハンドラーをパーサーに登録します。これらのハンドラーは、パーサーが解析中のドキュメント内で関連する構造を検出したときに呼び出されます。開始タグは、ハンドラーを登録できる構造の一例です。 Windows ユーザーは、プリコンパイル済みのライブラリと実行可能ファイルの両方、および開発者向けのソースコードを含む expatwin32bin パッケージを使用してくださ...

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash...

CVE-2025-13401-XSS-Stored

概念验证：Autoptimize 标签。 在版本 3.1.13 中，该函数采用“黑名单”方法（通过 pregreplace）在将原始 标签转换为 标签之前，移除特定属性如 title、alt、class、id、width 和 height。然而，它未能移除事件处理属性如 onload 或 onerror。 经过身份验证的攻击者（至少拥有贡献者角色）可以在帖子中嵌入恶意的 标签。当插件处理该帖子以生成预加载链接时，恶意的事件处理程序被保留并注入到页面 中的 标签内。由于 支持 onload 事件，当资源加载时，JavaScript 会执行。 漏洞代码（v3.1.13） //...