175 matches found
PT-2026-134254
How do you know if your security LLM actually knows cybersecurity? We tested CYBER-FROST-3.8 by @Blackfrost ai 180B security MoE on Qwen3.8-Flash-Next to destruction — then fixed its worst habit without touching a single weight. Step 1: find the knowledge boundary. Classic exploits EternalBlue,...
de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.2.1), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.2.1) +14 more potentially affected by CVE-2026-9800 via org.keycloak:keycloak-policy-enforcer (23.0.0)
org.keycloak:keycloak-policy-enforcer MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-policy-enforcer and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.2.1 -...
de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.3.2), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.3.2) +12 more potentially affected by CVE-2026-9800 via org.keycloak:keycloak-policy-enforcer (24.0.4)
org.keycloak:keycloak-policy-enforcer MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-policy-enforcer and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.3.2 -...
de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (>=2.2.4, <=2.3.3), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (>=2.2.4, <=2.3.3) +12 more potentially affected by CVE-2026-9800 via org.keycloak:keycloak-policy-enforcer (24.0.5)
org.keycloak:keycloak-policy-enforcer MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-policy-enforcer and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak =2.2.4, =2.2.4, =2.2....
Malicious code in lilypad-frost-fky005-project (npm)
The package lilypad-frost-fky005-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in koala-frost-nfk075-project (npm)
The package koala-frost-nfk075-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in kelp-30onm-abxgx-frost-project (npm)
The package kelp-30onm-abxgx-frost-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jungle-r1kay-gw0aj-frost-project (npm)
The package jungle-r1kay-gw0aj-frost-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in igloo-frost-jrf806-project (npm)
The package igloo-frost-jrf806-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in horizon-fr53a-wyawp-frost-project (npm)
The package horizon-fr53a-wyawp-frost-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in haven-wyjzj-i1oih-frost-project (npm)
The package haven-wyjzj-i1oih-frost-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in echo-ys9b7-9cg2s-frost-project (npm)
The package echo-ys9b7-9cg2s-frost-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dove-frost-wrh593-project (npm)
The package dove-frost-wrh593-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cascade-62nar-p4wjf-frost-project (npm)
The package cascade-62nar-p4wjf-frost-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview echo-ys9b7-9cg2s-frost-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026
Security teams are overwhelmed with findings but still struggle to answer a simple question: which risks matter right now? A vulnerability alone is rarely the problem. The same vulnerability running in production, exposed through a misconfiguration or over-permissioned identity, is a real path to...
Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026
Security teams are overwhelmed with findings but still struggle to answer a simple question: which risks matter right now? A vulnerability alone is rarely the problem. The same vulnerability running in production, exposed through a misconfiguration or over-permissioned identity, is a real path to...
Microsoft named a leader in the Frost Radar for cloud and application runtime security
Cloud security is shifting from visibility to contextual risk reduction, extending into the applications, APIs, and workloads where attacks actually occur. Because modern workloads are built and run in the cloud, security teams must understand which exposures matter most, prioritize what can trul...
New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing
A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of your SSD. The attack, called FROST , needs no native code, no extension, and no permission prompt. You open the page, leave the tab sitting there, and it watches the driv...
