CVE-2024-41156

Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide potential attackers valuable configuration information about the Tropos network. Profiles can only be exported by authenticated users with higher privilege of write access...

CVE-2018-10622

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data...

CVE-2023-50957

IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtaining encrypted data from clear text key storage. IBM X-Force ID: 275783...

Ruckus Network Director Privilege Escalation

The vulnerability of the software for centralized management of the Ruckus Network Director infrastructure is related to the use of strictly encrypted user credentials. Exploiting this vulnerability can allow an attacker to increase their privileges and gain access to the RND server...

Ruckus Network Director Cryptographic Key Hard-Crypted

The vulnerability of the software for centralized control of the Ruckus Network Director is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain access to the RND server...

SIMATIC CN 4100 Data Compromise

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway lies in the use of strictly encrypted account data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ENENSYS IPGuard V2 Hardcoded Credentials Disclosure

The vulnerability of the ENENSYS IPGuard V2 device for switching transport levels is related to the use of strictly encrypted account data. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...

Ruckus Network Director Unauthorized Access

The vulnerability of the Ruckus Network Director software for centralized control of network infrastructure is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential...

Ruckus Network Director Cryptographic Key Hard-Crypted

The vulnerability of the software for centralized control of the Ruckus Network Director is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain access to the RND server...

OpenAI Launches ChatGPT Health with Isolated, Encrypted Health Data Controls

Artificial intelligence AI company OpenAI on Wednesday announced the launch of ChatGPT Health, a dedicated space that allows users to have conversations with the chatbot about their health. To that end, the sandboxed experience offers users the optional ability to securely connect medical records...

Cyber Threat Detection and Vulnerability Assessment System Using Generative AI and Large Language Model

Background: Cyber-attacks have evolved rapidly in recent years, many individuals and business owners have been affected by cyber-attacks in various ways. Cyber-attacks include various threats such as ransomware, malware, phishing, and Denial of Service DoS-related attacks. Challenges: Traditional...

Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators

Security teams are still catching malware. The problem is what they're not catching. More attacks today don't arrive as files. They don't drop binaries. They don't trigger classic alerts. Instead, they run quietly through tools that already exist inside the environment — scripts, remote access,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000449)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000449 advisory. A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is...

Malicious code in aoohttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9d3438b2d065c0535b5ac80ce789201be4f8095642d0f10a20a7da13d46152f8 Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

Malicious code in auohttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f4b76a407d91e23cb990d6ed08e3c0e81898f2b97d690db76b4e3b547fda5fab Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

MAL-2026-38 Malicious code in auohttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f4b76a407d91e23cb990d6ed08e3c0e81898f2b97d690db76b4e3b547fda5fab Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

Malicious code in aiohtto (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9338a4f3f167cf0ba279696ac9ae9bae26219391e2a87a805cc8bb92b4cddd6e Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

Comparative Evaluation of VAE, GAN, and SMOTE for Tor Detection in Encrypted Network Traffic

Encrypted network traffic poses significant challenges for intrusion detection due to the lack of payload visibility, limited labeled datasets, and high class imbalance between benign and malicious activities. Traditional data augmentation methods struggle to preserve the complex temporal and...

RustFS gRPC Authentication Bypass

The vulnerability of the gRPC authentication application interface of the RustFS distributed data storage system is related to the use of strictly encrypted credentials. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain unauthorized access to t...

PT-2026-5077

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 147.0.1 Thunderbird versions prior to 140.7.1 Description A flaw exists that could allow for CSS-based exfiltration of content from partially encrypted emails when remote content is permitted. This could potential...