4186 matches found
Malicious code in blank-hacker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7571808edafde35b1c18ed118dd2c5e38669d09a9b24f81de0d04d2af8617a The OpenSSF Package Analysis project identified 'blank-hacker' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41444 Malicious code in blank-hacker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7571808edafde35b1c18ed118dd2c5e38669d09a9b24f81de0d04d2af8617a The OpenSSF Package Analysis project identified 'blank-hacker' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2025-7776
creationtimestamp| type| source ---|---|--- 2025-08-26 12:04:41+00:00| seen| https://www.cert.at/de/warnungen/2025/8/citrix-netscaler-adc-schwachstellen-cve-2025-7775 2025-08-26 13:25:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115095288317401393 2025-08-26 15:29:00+00:00| seen|...
Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Due to an overly broad allowlist of safe commands, it was possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation. Reliably exploiting this requires the ability to add untrusted content into a Claude Code contex...
The vulnerability of Google Chrome’s cookie handling mechanism, related to deficiencies in the error reporting mechanism, allows a hacker to steal cookie files.
The vulnerability of Google Chrome’s cookie handling mechanism is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow a hacker to steal cookie files...
“Serial Hacker” Sentenced to 20 Months in UK Prison
Rotherham hacker Al-Tahery Al-Mashriky jailed for 20 months after global cyberattacks, stealing millions of logins and targeting government…...
The vulnerabilities in the modules drivers/net/ethernet/stmicro/stmmac/stmmac_main.c and drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c of the Linux kernel allow a hacker to cause a service failure.
The vulnerability in the modules drivers/net/ethernet/stmicro/stmmac/stmmacmain.c and drivers/net/ethernet/stmicro/stmmac/stmmacptp.c of the Linux kernel is related to zero-division errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Confluence plugin for the instant messaging application Mattermost, related to insufficient checking of unusual or exceptional states, allows a hacker to trigger a service failure.
The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Hackers Leak 9GB of Data from Alleged North Korean Hacker’s Computer
Hackers release 9GB of stolen files from the computer of an alleged North Korean hacker, revealing tools, logs,…...
KrebsOnSecurity in New ‘Most Wanted’ HBO Max Series
A new documentary series about cybercrime airing next month on HBO Max features interviews with Yours Truly. The four-part series follows the exploits of Julius Kivimäki , a prolific Finnish hacker recently convicted of leaking tens of thousands of patient records from an online psychotherapy...
Hacker Accesses Millions of IMDataCenter Records from Exposed AWS Bucket
Florida firm IMDataCenter exposed 38GB of sensitive data including names, emails and ownership info. At least one hacker accessed and downloaded the files...
Hackers Abuse Microsoft 365 Direct Send to Deliver Internal Phishing Emails
A new Proofpoint report reveals how attackers are using Microsoft 365's Direct Send and unsecured SMTP relays to…...
Hacker Added Prompt to Amazon Q to Erase Files and Cloud Data
A hacker injected a malicious prompt into Amazon Q via GitHub, aiming to delete user files and wipe AWS data, exposing a major security flaw...
Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups
Microsoft has formally tied the exploitation of security flaws in internet-facing SharePoint Server instances to two Chinese hacking groups called Linen Typhoon and Violet Typhoon as early as July 7, 2025, corroborating earlier reports. The tech giant said it also observed a third China-based...
EventHunter: Dynamic Clustering and Ranking of Security Events from Hacker Forum Discussions
Hacker forums provide critical early warning signals for emerging cybersecurity threats, but extracting actionable intelligence from their unstructured and noisy content remains a significant challenge. This paper presents an unsupervised framework that automatically detects, clusters, and...
U.S. Sanctions North Korean Andariel Hacker Behind Fraudulent IT Worker Scheme
The U.S. Department of the Treasury's Office of Foreign Assets Control OFAC on Tuesday sanctioned a member of a North Korean hacking group called Andariel for their role in the infamous remote information technology IT worker scheme. The Treasury said Song Kum Hyok, a 38-year-old North Korean...
U.S. Sanctions North Korean Andariel Hacker Behind Fraudulent IT Worker Scheme
The U.S. Department of the Treasury's Office of Foreign Assets Control OFAC on Tuesday sanctioned a member of a North Korean hacking group called Andariel for their role in the infamous remote information technology IT worker scheme. The Treasury said Song Kum Hyok, a 38-year-old North Korean...
US Announces Arresting Chinese Hacker Linked to HAFNIUM Group
A Chinese state-sponsored hacker, Xu Zewei, 33, has been arrested for his alleged role in the widespread HAFNIUM cyber attacks and theft of COVID-19 research. Learn about the charges and China's Ministry of State Security involvement...
Surveillance Used by a Drug Cartel
Once you build a surveillance system, you can't control who will use it: A hacker working for the Sinaloa drug cartel was able to obtain an FBI official’s phone records and use Mexico City’s surveillance cameras to help track and kill the agency’s informants in 2018, according to a new US justice...
The vulnerability of the Linux operating system’s kernel, related to the allocation of unlimited memory, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...