CVE-2026-33631

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

EUVD-2026-16371

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

EUVD-2025-138985

Malicious code in poglymer-oghh-faa npm...

EUVD-2025-143007

Malicious code in buta-faa-safa npm...

EUVD-2025-143002

Malicious code in buta-faa-saiiagfa npm...

EUVD-2025-143003

Malicious code in buta-faa-saiiaagfa npm...

EUVD-2025-143006

Malicious code in buta-faa-saiagfa npm...

EUVD-2025-143004

Malicious code in buta-faa-saigaiaagfa npm...

EUVD-2025-143001

Malicious code in buta-faa-siagfa npm...

EUVD-2025-143005

Malicious code in buta-faa-saiaiaagfa npm...

Malicious code in dajouka-faa-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0afd3f263ecdfa3a5559991b60bd078fbcc58d0311ef2046af854e7dc23b6404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa14a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db15f6956aad1e2ed61e293e7e883f72cb200f045286570b94a6d8e01be00646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa1ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68bf4f3ca6fe7a3365c7e35aad707cf11cd54bca466f55a6932746df2dada66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Mystery Drone Sightings Lead to FAA Ban Despite No Detected Threats

Plus: Google’s U-turn on creepy “fingerprint” tracking, the LockBit ransomware gang’s teased comeback, and a potential US ban on the most popular routers in America...

Airbus Navblue Flysmart LPC-NG issues

LPC-NG or Less Paper Cockpit - Next Generation is an electronic flight bag EFB application offered by Navblue, a part of Airbus. It’s used for calculating engine thrust requirements perf on takeoff and braking action on landing, among many features that help make flight safer and more efficient...

Attacking EFB updates

Software So who actually develops the software installed on Electronic Flight Bags EFBs? The software can originate from a large range of sources: System software developers including the OS, drivers, firmware and utility The aircraft manufacturer for Installed & Portable EFB devices The airline...

lessonslearned.faa.gov Cross Site Scripting vulnerability OBB-2241557

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lct.npn.faa.gov Cross Site Scripting vulnerability OBB-2228527

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Commercial Air Transport EFB Regulation

Introduction The Electronic Flight Bag EFB is a device pilots use to gather information. This includes viewing airport charts ground and in-flight, calculating take-off and landing performance, as well as multiple other uses as detailed in our other EFB blog posts. EFB regulation is, in a word,...

The SolarWinds Body Count Now Includes NASA and the FAA

Plus: Firefox blocks more tracking, how to fight a robodog, and more of the week’s top security news...