EUVD-2025-117292

Malicious code in interesting-jade-parrot npm...

EUVD-2025-117291

Malicious code in interesting-tan-roadrunner npm...

EUVD-2025-104483

Malicious code in interestingbaboonz3n npm...

EUVD-2025-74521

Malicious code in interestingjayviolet-81 npm...

EUVD-2025-81516

Malicious code in interestinghamster0xrequest npm...

EUVD-2025-69801

Malicious code in interestinggrasshopperz3n npm...

EUVD-2025-63470

Malicious code in interestingminkz3n npm...

EUVD-2025-63469

Malicious code in interestingorcaz3n npm...

EUVD-2025-85515

Malicious code in interestingcheetahz3n npm...

EUVD-2025-53695

Malicious code in interesting-yellow-lobster npm...

EUVD-2025-53696

Malicious code in interesting-magenta-wolf npm...

EUVD-2025-53697

Malicious code in interesting-jade-crab npm...

EUVD-2025-53698

Malicious code in interesting-gold-mite npm...

Friday Squid Blogging: On Squid Brains

Interesting. Blog moderation policy...

CVE-2024-33859

An issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being escaped in the "Interesting Field" Web UI, leading to XSS...

Logpoint 跨站脚本漏洞

Logpoint is a network security application from the Danish company Logpoint. A cross-site scripting vulnerability exists in Logpoint versions prior to 7.4.0, which stems from HTML code sent via logs that is not escaped in Interesting Field's Web UI, resulting in cross-site scripting...

Second Interdisciplinary Workshop on Reimagining Democracy

Last month, I convened the Second Interdisciplinary Workshop on Reimagining Democracy IWORD 2023 at the Harvard Kennedy School Ash Center. As with IWORD 2022, the goal was to bring together a diverse set of thinkers and practitioners to talk about how democracy might be reimagined for the...

Friday Squid Blogging: Squid Processing Facility

This video of a modern large squid processing ship is a bit gory, but also interesting. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

Vulnerabilities & Threats that Matter 18 – 24th July

Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 497 11 2 Worldwide 6 33 For a detailed threat digest, download the pdf file here Summary The third week of July 2022 witnessed the discovery of 497 vulnerabilities out of...

MANSPIDER - Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content - Regex Supported!

Crawl SMB shares for juicy information. File content searching + regex is supported! File types supported: PDF DOCX XLSX PPTX any text-based format and many more!! MAN-SPIDER will crawl every share on every target system. If provided creds don't work, it will fall back to "guest", then to a null...