SigDigger

SigDigger — бесплатный анализатор цифровых сигналов SigDigger — это бесплатный анализатор цифровых сигналов для GNU/Linux и macOS, предназначенный для извлечения информации из неизвестных радиосигналов. Он поддерживает различные SDR-устройства через SoapySDR, обеспечивает регулируемую демодуляцию...

loupe

Loupe Loupe — это приложение для iOS и iPadOS, которое даёт вам наглядное представление о поверхности цифрового отпечатка устройства. Оно считывает реальные значения из публичных iOS API — тех же самых, которые может вызывать любое стороннее приложение, — и показывает их вам в сыром виде. Смысл...

wigle-wifi-wardriving

WiGLE Wardriving sans fil Client de wardriving réseau pour Android, depuis wigle.net. Ce client fournit la détection géolocalisée et l'enregistrement des signaux WiFi, Bluetooth et cellulaires à l'aide d'appareils Android. Depuis janvier 2023, cette application prend en charge les versions 24...

trustlock

trustlock Un contrôleur d'admission de dépendances natif Git. Évalue les signaux de confiance à chaque changement de dépendance. Comment ça fonctionne trustlock s'exécute en tant que hook pre-commit Git mode consultatif et une vérification CI mode enforcement : Consultatif pre-commit : avertit en...

ai-email-threat-research

Terminal de Menaces Un jeu de recherche en cybersécurité mesurant comment les humains détectent les e-mails de phishing générés par l'IA. Construit comme une expérience de terminal rétro. Live : research.scottaltiparmak.com Le Problème L'IA peut désormais générer des e-mails de phishing avec une...

fingerprint-pro-internals

Fingerprint Pro v4, deobfuscated and documented 143 signals named. The bundle unpacked. The wire format decoded. Run it on your browser · Read the docs · Signal map · Collector sources...

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.78.5, and also in versions 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: signal: restored the overriderlimit logic Before committing the change d64696905554 “Reimplemented RLIMITSIGPENDING based on ucounts”, the R LIMIT for UCOUNTRLIMITSIGPENDING was not enforced for a certain class of signals. Howeve...

Astra Linux – Vulnerability in PostgresSQL 11

A vulnerability was discovered in PostgreSQL 12.2, allowing attackers to cause a denial of service by repeatedly sending SIGHUP signals. NOTE: This claim is disputed by the vendor, as untrusted users are unable to send SIGHUP signals; such signals can only be sent by a PostgreSQL superuser, a use...

EUVD-2026-46178

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...

CVE-2026-59845

CVE-2026-59845 describes a vulnerability in the libssh library where, when using the ProxyCommand feature, an unchecked fork() failure can be stored as PID -1. During cleanup, signals may be sent across the caller’s process tree, enabling local denial of service. The Red Hat advisory confirms thi...

PT-2026-61859

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists in libssh when using the ProxyCommand feature. An unchecked failure in the fork function can result in a process ID of -1 being stored. During the cleanup process, signals may be...

MAL-2026-10690 Malicious code in qwen-asr-pvt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8b2f6db0443a648cdf03348c8dd9351568469f84b8d61022f1ed1da2a330e The package's pyproject.toml declares an unpinned runtime dependency on transformers4576, a lookalike of the widely used HuggingFace transformers...

patchtriage

PatchTriage !CIhttps://github.com/d01ki/patchtriage/actio...

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked it safe. The payload was harmless by...

Scammers Use Fake GitHub Stars, VirusTotal Reviews to Spread Crypto Clipper

A multi-platform malware campaign abuses fake trust signals to infect Windows and Mac users with a crypto clipper packed with 15,500 attacker wallets...

Malicious code in @mastra/github-signals (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e263abbd9ed9975f3f8aaecfd1a780616bc3aef00238ed9ba9075b5bf4e38f37 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in backoffice-charges-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047eb92a0e8bb401b2c205765616c9b4b715ee7cfd33d2e6ef9dc8d645b77f04 On every npm install, the preinstall lifecycle script node index.js /dev/null 2&1 silently HTTPS-POSTs a JSON payload to https://avamnrwqo7.rbmock.de...

MAL-2026-5612 Malicious code in gpt-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9bdc5e04979d5b4f73407bcedaecc9df24dbb03e0bfbc0edefe333023dc50c On npm install, postinstall.js runs unconditionally and collects a wide range of installer-side reconnaissance data: hostname and FQDN, contents of...

Reconstructing AI activity in investigations

AI systems are now part of everyday work. Investigators need a consistent way to reconstruct what happened within them. Security teams are already investigating activity involving Microsoft 365 Copilot and Azure AI services—from prompt injection attempts to unexpected data access. Those signals a...