Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

Your attack surface no longer lives on one operating system, and neither do the campaigns targeting it. In enterprise environments, attackers move across Windows endpoints, executive MacBooks, Linux infrastructure, and mobile devices, taking advantage of the fact that many SOC workflows are still...

MAL-2026-2500 Malicious code in totally-safe-util (npm)

Multiple suspicious behaviors: postinstall script, hex obfuscation, OS command execution to open a Rickroll, and attempt to hide execution. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d45a8a1395a8ff66e2ea74cacd9d8de0ebaa9e88e0170a6907b3e4861a2acc5 The packa...

CVE-2026-5619 Braffolk mcp-summarization-functions summarize_command mcp-server.ts os command injection

A flaw has been found in Braffolk mcp-summarization-functions up to 0.1.5. This impacts an unknown function of the file src/server/mcp-server.ts of the component summarizecommand. Executing a manipulation of the argument command can lead to os command injection. The attack requires local access...

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The Totolink A7100RU 7.4cu.2313b20191024 version has a vulnerability related to operating system command injection. This vulnerability stems from incorrect handling of the parameter “mode” in the file...

Vim 操作系统命令注入漏洞

Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.2.0276 contained a vulnerability related to operating system command injection. This vulnerability stemmed from a model line sandbox bypass, allowing arbitrary operating system commands to be...

Summarization Functions 操作系统命令注入漏洞

Summarization Functions is an intelligent text summarization server developed by Braffolk’s individual developer. Versions of Summarization Functions prior to 0.1.5 had a vulnerability related to operating system command injection. This vulnerability stemmed from improper handling of the command...

PT-2026-30562

A flaw has been found in Braffolk mcp-summarization-functions up to 0.1.5. This impacts an unknown function of the file src/server/mcp-server.ts of the component summarize command. Executing a manipulation of the argument command can lead to os command injection. The attack requires local access...

PackageKit Privilege Escalation

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Music component macOS Unauthorized Access

The vulnerability of the Music component in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

iPadOS iOS Buffer Overflow DoS

The vulnerability of iPadOS and iOS operating systems lies in the fact that operations occur outside of the memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Messages Component macOS Unauthorized Access

The vulnerability of the Messages component in macOS operating systems is related to insecure temporary files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

iTunes Store Component Bypass

The vulnerability of the iTunes Store component for iPadOS and iOS is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to circumvent existing security restrictions...

AppleKeyStore DoS

The vulnerability of the AppleKeyStore component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious individual to cause a service failure...

AppleEvents Component Unauthorized Access

The vulnerability of the AppleEvents component in macOS operating systems is related to state management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

AppleScript macOS Data Compromise

The vulnerability of AppleScript components in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

configd daemon in operating

The vulnerability of the configd daemon in macOS operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

Shortcuts Component Unauthorized Access

The vulnerability of the Shortcuts component in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Archive Utility macOS Unauthenticated Access

The vulnerability of the Archive Utility component in macOS operating systems is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

iPadOS iOS macOS Information Disclosure

The vulnerabilities of iPadOS and iOS operating systems, as well as macOS, involve the exploitation of registration files for information disclosure. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information...

libxpc macOS Unauthorized Access

The vulnerability of the libxpc library in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...