1605 matches found
Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware
The U.K. National Cyber Security Centre NCSC has revealed that threat actors have exploited the recently disclosed security flaws impacting Cisco firewalls as part of zero-day attacks to deliver previously undocumented malware families like RayInitiator and LINE VIPER. "The RayInitiator and LINE...
Malicious code in metereorpreter-test2-dns (npm)
The package communicates with a domain associated with malicious activity...
China-Linked Hackers Hit US Tech Firms with BRICKSTORM Malware
China-backed UNC5221 targets US legal and tech firms by deploying BRICKSTORM malware on neglected VMware and Linux/BSD appliances, Google's Mandiant reports...
WhatsApp Desktop for Mac 2.22.25.2 < 2.25.21.78 Incorrect Authorization (August Update)
The version of WhatsApp Desktop installed on the remote host is 2.22.25.2 prior to 2.25.21.78. It is, therefore, affected by a vulnerability as referenced in the August update advisory: - Incomplete authorization of linked device synchronization messages in WhatsApp for Mac v2.25.21.78 could have...
Malicious code in gd-flag-content (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in circuit-retained (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71eb6f38e5fe1dce06d13f2ba4d58e8a3addd8b17b529b327d02f34b54472cb5 The OpenSSF Package Analysis project identified 'circuit-retained' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...
CVE-2025-55911
creationtimestamp| type| source ---|---|--- 2025-09-17 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qaxzzye2r 2025-09-18 06:13:20+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3lz3ozyewsb2j...
CVE-2025-9449
creationtimestamp| type| source ---|---|--- 2025-09-17 09:20:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyziz5j5hb2m 2025-09-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-903/...
MAL-2025-47412 Malicious code in suchinind (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...
Malicious code in top-crawl-agents (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9696763f6821540dd1025eb17efe91e97175725aa5add6b347bfc09db48e33cc Any computer that has this package installed or running should be considered...
Malicious code in simplemoduleonetestone (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
China-Linked AI Pentest Tool ‘Villager’ Raises Concern After 10K Downloads
China-linked AI tool Villager, published on PyPI, automates cyberattacks and has got experts worried after 10,000 downloads in…...
CLSA-2025-1757690477 glibc: Fix of CVE-2025-4802
CVE-2025-4802: prevent untrusted LDLIBRARYPATH from loading dynamically shared libraries in statically compiled binaries that call dlopen...
China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
The House Select Committee on China has formally issued an advisory warning of an "ongoing" series of highly targeted cyber espionage campaigns linked to the People's Republic of China PRC amid contentious U.S.–China trade talks. "These campaigns seek to compromise organizations and individuals...
Linux Distros Unpatched Vulnerability : CVE-2019-15062
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Dolibarr 11.0.0-alpha. A user can store an IFRAME element containing a user/card.php CSRF request in his Linked Files settings page...
Malicious code in ifood-faster-remote-config (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b47856b6547efd8d456abded39dc3e710dfa04600ceb26aeeffdae16c33aa4f The OpenSSF Package Analysis project identified...
45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage
Threat hunters have discovered a set of previously unreported domains, some going back to May 2020, that are associated with China-linked threat actors Salt Typhoon and UNC4841. "The domains date back several years, with the oldest registration activity occurring in May 2020, further confirming...
CVE-2025-58401
Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...
CVE-2025-48533
In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48533
Google Android is affected by an elevation of privilege vulnerability caused by a race condition (CWE-362 ) in multiple locations. The flaw allows an attacker to use apps linked from a lockscreen app context menu , potentially leading to local escalation of privilege without requiring additional ...