CVE-2025-0121 Cortex XDR Agent: Local Windows User Can Crash the Agent

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it...

Cortex XDR Agent: Local Windows User Can Crash the Agent

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it. Work...

Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain

In mid-March 2025, Kaspersky technologies detected a wave of infections by previously unknown and highly sophisticated malware. In all cases, infection occurred immediately after the victim clicked on a link in a phishing email, and the attackers' website was opened using the Google Chrome web...

MAL-2025-2654 Malicious code in cdn-icon-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c5df12b33f292879e5c1199fb8a0130cbbb1a1cd4cf1d3e72cb723143ccaa1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2492 Malicious code in @theoretical123/ssh2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e71f899338d9878e98836fb491679782d7b1b04111554fc7230e7263049d3e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

StilachiRAT analysis: From system reconnaissance to cryptocurrency theft

In November 2024, Microsoft Incident Response researchers uncovered a novel remote access trojan RAT we named StilachiRAT that demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. Analysis of the StilachiRAT’s...

MAL-2025-2353 Malicious code in @sheingroup/loveshiro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 524a8945eaa3e9c0e35a456f440638f7568e971bf57dff30c9b6a4cd0be14714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malwarebytes Premium Security awarded “Product of the Year” from AVLab

Malwarebytes Premium Security has once again been awarded “Product of the Year” after successfully blocking 100% of “in-the-wild” malware samples. The samples were deployed in multiple, consecutive third-party tests conducted by the AVLab Cybersecurity Foundation. AVLab commended Malwarebytes for...

MAL-2025-2014 Malicious code in configs-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e2873a2ee1e0748ca75f7e661e6961df7a4522dae8e7e658c47cfbab20eff7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1605 Malicious code in liquidity-bridge-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f40a6382779a7d45d5a09b615daea39485cff80a3a6d9b0b8a1b5ad3f68d4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1489 Malicious code in list-files-in-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dec57d2d81d6a09a279dfc443753f7a1547d3c838aaf0ac20b735764a88c9b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1463 Malicious code in sysaid-infra-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32067df7060881cbe716c03dd7dc8c3b443263f314412e89e99a435622227b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2025:0328-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

MAL-2024-12070 Malicious code in yb2bacceleratorstorefront-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6b9ec48a872ef195c69f3ecee359b142d1f9bb683a236c67a0c96876efafd0 The OpenSSF Package Analysis project identified 'yb2bacceleratorstorefront-web' @ 1.0.0 npm as malicious. It is considered malicious because: -...

Ongoing Phishing and Malware Campaigns in December 2024

Cyber attackers never stop inventing new ways to compromise their targets. That's why organizations must stay updated on the latest threats. Here's a quick rundown of the current malware and phishing attacks you need to know about to safeguard your infrastructure before they reach you. Zero-day...

Malicious code in docs-ux (npm)

--- -= Per source details. Do not edit below this line.=-...

Detecting Pegasus Infections

This tool seems to do a pretty good job. The company's Mobile Threat Hunting feature uses a combination of malware signature-based detection, heuristics, and machine learning to look for anomalies in iOS and Android device activity or telltale signs of spyware infection. For paying iVerify...

Why Cybercriminals Are Not Necessarily Embracing AI

As published in HackerNoon and featured as a “Top 20 Best Read Article” for AI. Introduction The rapid advancement of AI has offered powerful tools for malware detection, but it has also introduced new avenues for adversarial attacks. As an example, recently OpenAI reported threat actors abusing...

"Failed to publish malware detection metadata to the catalog"

Challenge A backup job's task is completed with the warning: Failed to publish guest file system index to the catalog The warning above appears at the task level when a machine is selected in the Statistics window. An additional message will appear in the Statistics window at the job summary leve...

MAL-2024-10609 Malicious code in bitcore-mnemoic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab9b0ec80242884d35432aaa1d154e06c0b6b7e99cff7afcbd8f4834cb9d584d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...