AI Found Twelve New Vulnerabilities in OpenSSL

The title of the post is"What AI Security Research Looks Like When It Works," and I agree: In the latest OpenSSL security release on January 27, 2026, twelve new zero-day vulnerabilities meaning unknown to the maintainers at time of disclosure were announced. Our AI system is responsible for the...

MAL-2025-136288 Malicious code in proposed_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb2c5fbc9dc26e579f79e92aec659c4a95ac4d8f9b64f825abad5e7e0affb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102970

Malicious code in proposedflyz3n npm...

EUVD-2025-75941

Malicious code in proposedcatfish-toolteadev npm...

EUVD-2025-77538

Malicious code in proposedpinnipedgold-33 npm...

EUVD-2025-80858

Malicious code in proposedcattle0xrequest npm...

Malicious code in proposed_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69737263fe3dfd08db816452de708eb7ab12fd5b6a1f7abcc10ba9c45e6be277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80855

Malicious code in proposedlocustdumbs npm...

EUVD-2025-68504

Malicious code in proposedhyenaz3n npm...

Malicious code in proposed_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8c823098ccc6f715e9b59d28eadbcedaa83c37ca7223911f1309da8183e61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62488

Malicious code in proposedkitez3n npm...

EUVD-2025-67723

Malicious code in proposedsailfishz3n npm...

EUVD-2025-52581

Malicious code in proposed-gold-mockingbird npm...

EUVD-2025-52583

Malicious code in proposed-apricot-impala npm...

Malicious code in proposed_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e597134b96022c4dd3637e47c0655e6c45e3c87e10751a43b0f4125cb6986d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11234

A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...

Phishing Webpage Detection: Unveiling the Threat Landscape and Investigating Detection Techniques

In the realm of cybersecurity, phishing stands as a prevalent cyber attack, where attackers employ various tactics to deceive users into gathering their sensitive information, potentially leading to identity theft or financial gain. Researchers have been actively working on advancing phishing...

CVE-2025-2866

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49933)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49933 advisory. - In the Linux kernel, the following vulnerability has been resolved: blkiocost: fix more out of bound shifts...

CVE-2024-53857

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows attackers to trigger resource exhaustion vulnerabilities in rpgp by providing crafted messages. This affects general message parsing and decryption with symmetric keys...