Malicious code in com.microsoft.mixedreality.toolkit.foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263c060bfc159c6ec15abeaea9e25a0ff51e0cae3c061ff742788722cf44e3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.xr.windowsmr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 870b6731210e1aefbcb0add1866b91158405a3f0f47ae934e66035ef804d1b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-mixed-reality-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae2aac29e816c1c521ba84df550cef1414e18cc902667358cb2abee034adc0b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1355 Malicious code in azure-mixed-reality-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae2aac29e816c1c521ba84df550cef1414e18cc902667358cb2abee034adc0b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.microsoft.mixedreality.toolkit.tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010387da024ddb830436616463c0c0210bd24c8cbf1b4345f4e22e63d460806b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2044 Malicious code in com.microsoft.mixedreality.toolkit.tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010387da024ddb830436616463c0c0210bd24c8cbf1b4345f4e22e63d460806b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mixed-reality-remote-rendering (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f83ba8e96b73186a39a08cb80f7d2478ee60c69bd6aab62ac755f803f5db62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mixed-reality-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a272ff336532927814723e7f46c74172123a1b51a46c6cb9d6e8d2554267d90b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4640 Malicious code in mixed-reality-remote-rendering (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f83ba8e96b73186a39a08cb80f7d2478ee60c69bd6aab62ac755f803f5db62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4639 Malicious code in mixed-reality-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a272ff336532927814723e7f46c74172123a1b51a46c6cb9d6e8d2554267d90b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-mixedreality-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d667fb34d58a638aa2c1ecd67d257d4b9759127f40fa58d34ebb8b4c672d3ee9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1260 Malicious code in azure-arm-mixedreality-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d667fb34d58a638aa2c1ecd67d257d4b9759127f40fa58d34ebb8b4c672d3ee9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room

A group of academics has devised a system that can be used on a phone or a laptop to identify and locate Wi-Fi-connected hidden IoT devices in unfamiliar physical spaces. With hidden cameras being increasingly used to snoop on individuals in hotel rooms and Airbnbs, the goal is to be able to...

CISO Forum 2022: the first major Russian security conference in the New Reality

Hello everyone! After a two-year break, I took part in Moscow CISO Forum 2022 with a small talk "Malicious open source: the cost of using someone elses code". Alternative video link for Russia: CISO Forum is the first major Russian conference since the beginning of The New Reality of Information...

Mozilla: Use-after-free after VR Process destruction

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash...

Mozilla: Use-after-free after VR Process destruction

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash...

Mozilla: Use-after-free after VR Process destruction

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash...

Mozilla: Use-after-free after VR Process destruction

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash...

Mozilla: Use-after-free after VR Process destruction

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash...

Mozilla: Use-after-free after VR Process destruction

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash...