This Week in Spring: September 30th, 2025

Hi, Spring fans! As I write this I am about to board a flight for Colorado for the amazing Dev2Next conference! I'll be in Antwerp, Beglium for the amazing Devoxx event next week, and I'll be speaking at the Amsterdam JUG with James Ward on the Thursday after that, too! If you're around, be sure ...

Mapping Quantum Threats: An Engineering Inventory of Cryptographic Dependencies

The emergence of large-scale quantum computers, powered by algorithms like Shor's and Grover's, poses an existential threat to modern public-key cryptography. This vulnerability stems from the ability of these machines to efficiently solve the hard mathematical problems - such as integer...

Cloud Security in the CNAPP Era: Eight Important Takeaways

Eight takeaways on why Trend Vision One™ embodies the best of today’s CNAPP vision. Includes insights from 2025 Gartner® Market Guide for CNAPP...

Rethinking AI Data Security: A Buyer's Guide 

Generative AI has gone from a curiosity to a cornerstone of enterprise productivity in just a few short years. From copilots embedded in office suites to dedicated large language model LLM platforms, employees now rely on these tools to code, analyze, draft, and decide. But for CISOs and security...

MAL-2025-47231 Malicious code in 1xbet-prilozhenie-android-guid-bu43so24l (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383835faaa1776818bfc30feef201e28a1895ab870057429200bca02bfcabf11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

unserialize-exploit

Remote Code Execution By unserialized functionhttps://not...

Patch Tuesday - September 2025

Microsoft is addressing 176 vulnerabilities today, which seems like a lot, and it is. Curiously, Microsoft’s own Security Update Guide SUG for September 2025 Patch Tuesday only lists 86 vulns, and that’s because the SUG doesn’t include a large number of open source software OSS fixes published...

Malicious code in pyminer-dev-guide (npm)

The package pyminer-dev-guide was found to contain malicious code...

Malicious code in free-spins-in-coin-master-full-guide-2023-kdfkdz (npm)

The package free-spins-in-coin-master-full-guide-2023-kdfkdz was found to contain malicious code...

MAL-2025-45660 Malicious code in pyminer-dev-guide (npm)

The package pyminer-dev-guide was found to contain malicious code...

MAL-2025-44332 Malicious code in free-spins-in-coin-master-full-guide-2023-kdfkdz (npm)

The package free-spins-in-coin-master-full-guide-2023-kdfkdz was found to contain malicious code...

Malicious code in @lbnqduy180500/cuddly-guide (npm)

The package @lbnqduy180500/cuddly-guide was found to contain malicious code...

MAL-2025-42670 Malicious code in @lbnqduy180500/cuddly-guide (npm)

The package @lbnqduy180500/cuddly-guide was found to contain malicious code...

Unpacking the 2025 Gartner Market Guide for CNAPP

From siloed tools to a unified platform: Key takeaways from Gartner's new CNAPP report...

Rapid7 named a representative vendor in 2025 Gartner® Market Guide for Cloud-Native Application Protection Platforms (CNAPP)

Being a cloud security professional can feel like you’re caught in the middle of a tug-of-war. On one side, developers, driven by the need for speed and innovation, see security as a potential bottleneck; on the other, business leaders, who are often removed from the technical weeds, have little...

Comprehensive MCP Security Checklist: Protecting Your AI-Powered Infrastructure

With innovation comes risk. As organizations race to build AI-first infrastructure, security is struggling to keep pace. Multi-Agentic Systems – those built on Large Language Models LLMs and Multi-Component Protocols MCP - bring immense potential, but also novel vulnerabilities that traditional...

Online Medicine Guide browsemdcn.php File SQL Injection Vulnerability

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter Search in the file /browsemdcn.php. The vulnerability can be exploited by an attacker to...

Online Medicine Guide /addelivery.php File SQL Injection Vulnerability

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter deName in the file /addelivery.php. The vulnerability can be exploited by an attacker t...

CVE-2025-9028

A flaw has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /adphar.php. Executing manipulation of the argument phuname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2025-9027

A vulnerability has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /addelivery.php. The manipulation of the argument deName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...