RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT

Background RevengeHotels, also known as TA558, is a threat group that has been active since 2015, stealing credit card data from hotel guests and travelers. RevengeHotels' modus operandi involves sending emails with phishing links which redirect victims to websites mimicking document storage. The...

MAL-2025-6649 Malicious code in pr0tobuff-loaders-alt (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pr0tobuff-loaders-alt (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pr0tobuff-loaders (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6648 Malicious code in pr0tobuff-loaders (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bat-sec/pr0tobuff-loaders (npm)

--- -= Per source details. Do not edit below this line.=-...

XML External Entity (XXE) Injection

llama-index-readers-papers Papers Loaders package is vulnerable to XML External Entity XXE Injection. The vulnerability is due to the sitemap parser accepting untrusted XML input without disabling entity expansion, allowing attackers to exhaust system memory and cause a denial of service...

The Hidden Threat in Plain Text: Attacking RAG Data Loaders

Large Language Models LLMs have transformed human-machine interaction since ChatGPT's 2022 debut, with Retrieval-Augmented Generation RAG emerging as a key framework that enhances LLM outputs by integrating external knowledge. However, RAG's reliance on ingesting external documents introduces new...

Malicious code in thunderbolt-features-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee3eda7524a24da1ec85916ab8b93146e2e1399af30190b04b9021b0edbf7d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: Update to version 2.42.12: Fix a build failure, Fix occasional build failures, ani: Reject files with multiple INA or IART chunks, ani: Reject files with multiple anih chunks CVE-2022-48622 bsc1219276, ani: validate chunk size, Updated...

SUSE-SU-2025:20217-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: Update to version 2.42.12: + Fix a build failure, + Fix occasional build failures, + ani: Reject files with multiple INA or IART chunks, + ani: Reject files with multiple anih chunks CVE-2022-48622 bsc1219276, + ani: validate chunk size, +...

The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to external control of file names or paths, allows a perpetrator to load arbitrary PHP scripts and intercept plugin loaders to execute these scripts at will.

The vulnerability of the GLPI system for requests, incidents, and computer equipment inventory management is related to external control of file names or paths. Exploiting this vulnerability allows a malicious actor to load any arbitrary PHP script and intercept the plugin loader to execute that...

PEAKLIGHT Downloader Deployed in Attacks Targeting Windows with Malicious Movie Downloads

Cybersecurity researchers have uncovered a never-before-seen dropper that serves as a conduit to launch next-stage malware with the ultimate goal of infecting Windows systems with information stealers and loaders. "This memory-only dropper decrypts and executes a PowerShell-based downloader,"...

Black Basta-Linked Attackers Target Users with SystemBC Malware

An ongoing social engineering campaign with alleged links to the Black Basta ransomware group has been linked to "multiple intrusion attempts" with the goal of conducting credential theft and deploying a malware dropper called SystemBC. "The initial lure being utilized by the threat actors remain...

openSUSE Security Advisory (SUSE-SU-2024:2077-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:2077-2 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: gdk-pixbuf was updated to version 2.42.12: - Security issues fixed: CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf bsc1219276 - Changes in version 2.42.12: + ani: Reject files with multiple INA or IART chunks, + ani: validate chun...

SUSE-SU-2024:2077-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: gdk-pixbuf was updated to version 2.42.12: - Security issues fixed: CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf bsc1219276 - Changes in version 2.42.12: + ani: Reject files with multiple INA or IART chunks, + ani: validate chun...

Fedora: Security Advisory for glycin-loaders (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: glycin-loaders-0.1.2-2.fc39

Sandboxed and extendable image decoding...

‘Operation Endgame’ Hits Malware Delivery Platforms

Law enforcement agencies in the United States and Europe today announced Operation Endgame, a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed "the largest ever operation against botnets," the international effort...