owasp-cstg

OWASP Cloud Security Testing Guide The Cloud Security Testing Guide CSTG is a comprehensive, vendor-neutral manual for testing the security of cloud environments. It is written for penetration testers, cloud and platform engineers, security architects, detection engineers, and auditors - anyone w...

nextpnr

nextpnr -- a portable FPGA place and route tool nextpnr aims to be a vendor neutral, timing driven, FOSS FPGA place and route tool. Currently nextpnr supports: Lattice iCE40 devices supported by Project IceStorm Lattice ECP5 devices supported by Project Trellis Lattice Nexus devices supported by...

DEBIAN-CVE-2026-103679

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format TNEF file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition,...

CVE-2026-103679

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format TNEF file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition,...

nextpnr nextpnr-0.11

nextpnr -- a portable FPGA place and route tool nextpnr aims to be a vendor neutral, timing driven, FOSS FPGA place and route tool. Currently nextpnr supports: Lattice iCE40 devices supported by Project IceStorm Lattice ECP5 devices supported by Project Trellis Lattice Nexus devices supported by...

EUVD-2026-43747

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment...

I Wrote a New Book for Corelight

TLDR: I wrote a new book for Corelight called NDR Essentials. It's free at that link. This is the 10th book that I've authored or co-authored. The rest are all posted at taosecurity.com. Why? It was time. That’s what I thought when I heard that Corelight wanted to update its 2021 book on network...

BYOT-CPS: A Hybrid Cyber-Physical Systems Testbed for IoT Security Assessment and Platform Evaluation

Internet of Things IoT security research continues to face a methodological gap between scalable virtual experimentation and realistic device behaviour. While pure simulation and emulation platforms provide control, repeatability, and scale, they do not fully reproduce firmware-specific behaviour...

Malicious Package

Overview theme-neutral is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-371 Malicious code in theme-neutral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9701381076541b8fbe448e03eb174cb40e2fd27237bfb442f219bf94911d035 The package theme-neutral was found to contain malicious code. Source: ghsa-malware 50a19fb9e329c206942de6cdd79f346a105320f4e71d0b652b154001b1dde8e7...

EUVD-2026-3498

Malicious code in theme-neutral npm...

Satellite Cybersecurity across Orbital Altitudes: Analyzing Ground-Based Threats to LEO, MEO, and GEO

The rapid proliferation of satellite constellations, particularly in Low Earth Orbit LEO, has fundamentally altered the global space infrastructure, shifting the risk landscape from purely kinetic collisions to complex cyber-physical threats. While traditional safety frameworks focus on debris...

VEIL: Jailbreaking Text-To-Video Models Via Visual Exploitation from Implicit Language

Jailbreak attacks can circumvent model safety guardrails and reveal critical blind spots. Prior attacks on text-to-video T2V models typically add adversarial perturbations to obviously unsafe prompts, which are often easy to detect and defend. In contrast, we show that benign-looking prompts...

EUVD-2025-74424

Malicious code in neutralhoverflymaroon-42 npm...

Malicious code in neutral_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37159454b70f61d5ad89997f1f8e0d6395e89c5f5dfe254642a9eb6ed4521fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76196

Malicious code in neutralllama-appteadev npm...

EUVD-2025-76197

Malicious code in neutralbaboon-appteadev npm...

EUVD-2025-62912

Malicious code in neutralturtlez3n npm...

Malicious code in neutral_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c5a92516e78a34e4d460958c2e033d5b538aeec7e0569407948a373f54103d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95639 Malicious code in neutral_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a6ac43938a656b95592c8fd32531c59c04a239e75a5ff4e7b66f0ba8a1494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...