227 matches found
This Week in Spring - June 2nd, 2026
Hi, Spring fans, and welcome to another momentous installment of This Week in Spring! A lot to get into this week, but let's first take some time to address the meta: where are the May releases? If you read our May 11th post, you know they've been delayed. We wanted to speak a bit more about why ...
Measuring Real-World Prompt Injection Attacks in LLM-Based Resume Screening
LLMs are vulnerable to prompt injection attacks. However, this vulnerability has been primarily demonstrated conceptually in academic studies or through a few anecdotal case studies. Its prevalence and impact in real-world LLM-based applications are largely unexplored. In this work, we present th...
How Data Brokers Can Fuel Violence Against Public Servants
A new report from the Public Service Alliance finds state privacy laws offer public servants few ways to protect their private data, even as threats against them are on the rise...
Cybersecurity in the Public Sector: Challenges, Strategies and Best Practices
Public sector cybersecurity faces outdated systems, budget gaps, and rising attacks. Learn key challenges, defense strategies, and proven best practices...
The vulnerability of the OTP mechanism implemented in Rising Technosoft’s CAP Back Office Application allows attackers to bypass the 2FA protection and gain unauthorized access.
The vulnerability of the OTP mechanism implemented in Rising Technosoft’s CAP Back Office Application relates to bypassing the authentication process by using an alternative method or channel. Exploiting this vulnerability allows a malicious actor, operating remotely, to circumvent 2FA protection...
The vulnerability of the API Endpoint component of the Rising Technosoft CAP Back Office Application allows a attacker to trigger a service failure.
The vulnerability of the API Endpoint component in Rising Technosoft CAP Back Office Application is related to insufficient control over the frequency of interactions. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the API Endpoint component of the Rising Technosoft CAP Back Office Application allows a malicious individual to gain unauthorized access to user accounts.
The vulnerability of the API Endpoint component in Rising Technosoft CAP Back Office Application is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to user accounts...
Malicious code in rising_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-136739 Malicious code in rising_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89026
Malicious code in risingkingfisherz3n npm...
EUVD-2025-89025
Malicious code in risingplanarianz3n npm...
MAL-2025-116859 Malicious code in rising_planarian_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f5c79e68b8378b1c6cf9d11f2c01dea8e7e0b447302ed195f95ba8531eeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78402
Malicious code in risingmolez3n npm...
EUVD-2025-80693
Malicious code in risingdamselfly0xrequest npm...
Malicious code in rising_damselfly_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc2bc1e8b2ecaf4e579eda8d76756100bf865ddcabf1a830823c948f74d2f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rising_seahorse_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e8f021b2c910dc192c57630a91c3d8af7dee0cb9f25e5aa3acc7cff560df3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-73907
Malicious code in risingternrequirement npm...
EUVD-2025-73908
Malicious code in risingsquirrelz3n npm...
Malicious code in rising_stoat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f167572cf1404614873a14bcdde521823c527601d895f8c06e7a83b2fd5760e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...