GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kor, goreleaser, newrelic-infrastructure-agent, fq, govulncheck, configmap-reload, dockerize, shfmt, hubble-ui, litefs, tailscale, golangci-lint, rqlite, pulumi-kubernetes-operator, vite, mongo-tools, kubevela, argo-workflows, aws-flb-cloudwatch,...

New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

A new elaborate attack campaign has been observed employing PowerShell and VBScript malware to infect Windows systems and harvest sensitive information. Cybersecurity company Securonix, which dubbed the campaign DEEPGOSU, said it's likely associated with the North Korean state-sponsored group...

Information Disclosure

github.com/tianon/gosu is vulnerable information disclosure. The library changes and leaves file descriptors open when accessing them. This can allow a malicious user to change permissions on sensitive files and read them...