Amazon Web Services Research and Engineering Studio 安全漏洞

Amazon Web Services Research and Engineering Studio is a cloud-based research and engineering environment of Amazon, Inc. There is a security vulnerability in the version of Amazon Web Services Research and Engineering Studio from March 2025 to December 1, 2025. This vulnerability stems from the...

The Hack That Exposed Syria’s Sweeping Security Failures

When Syrian government accounts were hijacked in March, the breach looked chaotic. But it revealed something more troubling: a state struggling with the most basic layer of cybersecurity...

PT-2026-29967

Name of the Vulnerable Software and Affected Versions @usebruno/cli versions installed between 00:21 UTC and 03:30 UTC on March 31, 2026 Description A supply chain attack involving compromised versions of the axios npm package introduced a hidden dependency deploying a cross-platform Remote Acces...

GO-2026-4919 Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release...

GHSA-FGV2-4Q4G-WC35

creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:27+00:00| published-proof-of-concept| Telegram/pGlKXNBirRT0gxqFC1bVLs6pojbUfu72MTdyyvCxHD2SpM...

CVE-2026-32726

creationtimestamp| type| source ---|---|--- 2026-03-31 18:31:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miesq35nbb2w 2026-03-31 19:10:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieuvvjrol25 2026-03-31 19:20:34+00:00| published-proof-of-concept|...

GHSA-6C5X-3H35-VVW2

creationtimestamp| type| source ---|---|--- 2026-03-31 17:25:19+00:00| seen| Telegram/nw5w-ohs-CK0Rjuv5tJSQsl41JpqhSQHTKMS4QN8816OY...

CVE-2026-34506

creationtimestamp| type| source ---|---|--- 2026-03-31 12:25:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6cc6f472s 2026-03-31 12:26:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6dkiv7l27 2026-03-31 12:27:18+00:00| seen|...

CVE-2026-34730

creationtimestamp| type| source ---|---|--- 2026-03-31 12:06:47+00:00| published-proof-of-concept| https://github.com/copier-org/copier/security/advisories/GHSA-hgjq-p8cr-gg4h...

Security Bulletin: NVIDIA Jetson and IGX Devices - March 2026

NVIDIA has released a software update for NVIDIA® Jetson Linux. To protect your system, download and install this software update from the APT server or Jetson Download Center page, Jetson Linux Link and IGX Link. Go to NVIDIA Product Security...

Fedora 43 : dotnet9.0 (2026-22e517fe60)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-22e517fe60 advisory. This is the March 2026 release of .NET 9. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md - Runtime:...

March 31, 2026—KB5086672 (OS Builds 26200.8117 and 26100.8117) Out-of-band

None None...

CVE-2026-5150

creationtimestamp| type| source ---|---|--- 2026-03-30 21:21:54+00:00| published-proof-of-concept| Telegram/BUI3SEyOfGtUgM1Z1U1o2mGpepftA8GfZph5NShzoYe3c8...

A week in security (March 23 – March 29)

Last week on Malwarebytes Labs: Criminals are renting virtual phones to bypass bank security Bogus Avast website fakes virus scan, installs Venom Stealer instead Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka GlassWorm attack installs fake browser extension for...

CVE-2026-23306

creationtimestamp| type| source ---|---|--- 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0376/ 2026-04-02 17:35:28+00:00| seen| Telegram/HZqA8JUt2FAozZYRytzYF7AaLh-0IOaNQQoRXBtgecHRGmg 2026-05-05 20:00:00+00:00| seen|...

Fedora 42 : dotnet8.0 (2026-66c97240f2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-66c97240f2 advisory. This is the March 2026 release of .NET 8 Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md - Runtime:...

Fedora 42 : dotnet9.0 (2026-8ae04c01e3)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ae04c01e3 advisory. This is the March 2026 release of .NET 9. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md - Runtime:...

CVE-2026-33881

creationtimestamp| type| source ---|---|--- 2026-03-27 23:27:55+00:00| seen| Telegram/9UoOcMml4hO1LPqEQWig8KjS1ZNRBXJeCq-u3-UaU0LNh0...

CVE-2026-34474

creationtimestamp| type| source ---|---|--- 2026-03-27 23:26:51+00:00| seen| https://gist.github.com/minanagehsalalma/7a8516b9b00d0008f2f25750320560c9 2026-05-20 14:00:04+00:00| seen| https://t.me/GithubRedTeam/85028 2026-05-20 14:34:56+00:00| seen|...

CVE-2026-34395

creationtimestamp| type| source ---|---|--- 2026-03-27 18:42:39+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-77jp-mgcw-rfmr...