Badges, Bytes and Blackmail

Behind the scenes of law enforcement in cyber: what do we know about caught cybercriminals? What brought them in, where do they come from and what was their function in the crimescape? Introduction: One view on the scattered fight against cybercrime The growing sophistication and diversification ...

A Time Series Analysis of Malware Uploads to Programming Language Ecosystems

Software ecosystems built around programming languages have greatly facilitated software development. At the same time, their security has increasingly been acknowledged as a problem. To this end, the paper examines the previously overlooked longitudinal aspects of software ecosystem security,...

CVE-2025-26974

creationtimestamp| type| source ---|---|--- 2025-02-25 14:24:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5280 2025-02-25 17:22:56+00:00| seen| https://t.me/cvedetector/18880 2025-02-25 17:43:03+00:00| seen|...

CVE-2024-54756

creationtimestamp| type| source ---|---|--- 2025-02-17 08:34:31+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3liedme2kf22n 2025-02-17 20:02:02+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lifjzq2s6f2a 2025-02-20 23:16:56+00:00| published-proof-of-concept|...

CVE-2024-55215

creationtimestamp| type| source ---|---|--- 2025-02-07 21:50:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113964812542272403 2025-02-07 22:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmt3ddj523 2025-02-07 23:39:25+00:00| seen|...

CVE-2025-24361

creationtimestamp| type| source ---|---|--- 2025-01-24 23:51:19+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-4gf7-ff8x-hq99 2025-01-25 00:57:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113886275660665490 2025-01-25 01:05:09+00:00|...

CVE-2024-55924

creationtimestamp| type| source ---|---|--- 2025-01-14 20:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xwattm2n 2025-01-14 20:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113828673088149005 2025-01-14 22:22:51+00:00| seen|...

CVE-2024-56376

creationtimestamp| type| source ---|---|--- 2025-01-09 22:57:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113800867405477443 2025-01-09 23:14:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1111 2025-01-09 23:15:27+00:00| seen|...

CVE-2024-13285

creationtimestamp| type| source ---|---|--- 2025-01-09 20:14:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113800228496231503 2025-01-09 20:17:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdionhi4k27 2025-01-09 21:57:33+00:00| seen|...

CVE-2024-45555

creationtimestamp| type| source ---|---|--- 2025-01-06 11:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z2pmdaa2m 2025-01-06 11:42:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113781225667459460 2025-01-06 11:48:26+00:00| seen|...

Syrian Electronic Army Hits CNN, Microsoft

Just like it’s done time and time before, the Syrian Electronic Army SEA broke into yet another media outlet late last week, hacking a handful of social media accounts belonging to CNN, including seven Twitter accounts and two Facebook accounts. CNN admitted the accounts were compromised in a pos...

NASDAQ Patches Reported XSS Vulnerability

A NASDAQ representative confirmed this morning that a cross-site scripting vulnerability on the exchange’s website discovered by an ethical hacker has been patched. The issue was reported on Sept. 2 by Ilia Kolochenko, chief executive of High-Tech Bridge, a Swiss penetration testing company...

Google Asks FISA Court to Allow it to Publish Data on Government Requests

Saying that inaccurate media reports about the PRISM program have damaged the company’s reputation, Google has asked the Foreign Intelligence Surveillance Court for permission to publish the number of requests the company gets for user data under various parts of the Foreign Intelligence...

China Publicly Claims to Be the Victim of U.S. Cyberattacks

On Thursday the Chinese government, long considered the aggressor in highly publicized U.S. cyberattacks, publicly spoke about being the victim. Two of its military Web sites were attacked an average of 144,000 per month and two-thirds of those strikes came from the United States, according to a...

October, 2006: 9.6 million Sony batteries recalled after reports of overheating

This was just the first in what would prove to be a string of embarrassments to the Japanese firm over the manufacture of laptop batteries. It began with reports in both Japan and the U.S. about Sony-manufactured lithium ion batteries that were overheating and, in some cases, bursting into flames...

The 2010 Threat Landscape

Costin Raiu, chief security expert at Kaspersky Lab in Romania, discusses the state of the threat landscape for the year ahead, including botnets, malicious PDFs and targeted attacks. Please note: Raiu is referring to media reports that attackers may have stolen some of Adobe’s source code. Adobe...