wigle-wifi-wardriving

WiGLE Wireless Wardriving Cliente de network stumbling para Android, de wigle.net. Este cliente proporciona detección y registro geolocalizado de señales WiFi, Bluetooth y celulares utilizando dispositivos Android. A partir de enero de 2023, esta aplicación es compatible con las versiones de SDK ...

ai-email-threat-research

Terminal de Amenazas Un juego de investigación en ciberseguridad que mide cómo los humanos detectan correos electrónicos de phishing generados por IA. Construido como una experiencia de terminal retro. En vivo: research.scottaltiparmak.com El Problema La IA ahora puede generar correos electrónico...

loupe

Loupe Loupe es una aplicación para iOS y iPadOS que te ofrece un recorrido práctico por la superficie de huellas digitales del dispositivo. Lee valores reales de las API públicas de iOS, las mismas que cualquier aplicación de terceros puede llamar, y te los muestra en crudo. La idea es simple: ve...

trustlock

trustlock Un controlador de admisión de dependencias nativo de Git. Evalúa señales de confianza en cada cambio de dependencia. Cómo funciona trustlock se ejecuta como un hook pre-commit de Git modo consultivo y una verificación de CI modo forzado: Consultivo pre-commit: advierte sobre infraccione...

SigDigger

SigDigger - The free digital signal analyzer SigDigger is a free digital signal analyzer for GNU/Linux and macOS, designed to extract information of unknown radio signals. It supports a variety of SDR devices through SoapySDR, and allows adjustable demodulation of FSK, PSK and ASK signals, decode...

fingerprint-pro-internals

Fingerprint Pro v4, deobfuscated and documented 143 signals named. The bundle unpacked. The wire format decoded. Run it on your browser · Read the docs · Signal map · Collector sources...

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.78.5, and also in versions 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...

Astra Linux – Vulnerability in PostgresSQL 11

A vulnerability was discovered in PostgreSQL 12.2, allowing attackers to cause a denial of service by repeatedly sending SIGHUP signals. NOTE: This claim is disputed by the vendor, as untrusted users are unable to send SIGHUP signals; such signals can only be sent by a PostgreSQL superuser, a use...

EUVD-2026-46178

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...

CVE-2026-59845

CVE-2026-59845 describes a vulnerability in the libssh library where, when using the ProxyCommand feature, an unchecked fork() failure can be stored as PID -1. During cleanup, signals may be sent across the caller’s process tree, enabling local denial of service. The Red Hat advisory confirms thi...

PT-2026-61859

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists in libssh when using the ProxyCommand feature. An unchecked failure in the fork function can result in a process ID of -1 being stored. During the cleanup process, signals may be...

MAL-2026-10690 Malicious code in qwen-asr-pvt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8b2f6db0443a648cdf03348c8dd9351568469f84b8d61022f1ed1da2a330e The package's pyproject.toml declares an unpinned runtime dependency on transformers4576, a lookalike of the widely used HuggingFace transformers...

patchtriage

PatchTriage !CIhttps://github.com/d01ki/patchtriage/actio...

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked it safe. The payload was harmless by...

Scammers Use Fake GitHub Stars, VirusTotal Reviews to Spread Crypto Clipper

A multi-platform malware campaign abuses fake trust signals to infect Windows and Mac users with a crypto clipper packed with 15,500 attacker wallets...

Malicious code in @mastra/github-signals (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e263abbd9ed9975f3f8aaecfd1a780616bc3aef00238ed9ba9075b5bf4e38f37 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in backoffice-charges-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047eb92a0e8bb401b2c205765616c9b4b715ee7cfd33d2e6ef9dc8d645b77f04 On every npm install, the preinstall lifecycle script node index.js /dev/null 2&1 silently HTTPS-POSTs a JSON payload to https://avamnrwqo7.rbmock.de...

MAL-2026-5612 Malicious code in gpt-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9bdc5e04979d5b4f73407bcedaecc9df24dbb03e0bfbc0edefe333023dc50c On npm install, postinstall.js runs unconditionally and collects a wide range of installer-side reconnaissance data: hostname and FQDN, contents of...

Reconstructing AI activity in investigations

AI systems are now part of everyday work. Investigators need a consistent way to reconstruct what happened within them. Security teams are already investigating activity involving Microsoft 365 Copilot and Azure AI services—from prompt injection attempts to unexpected data access. Those signals a...

FreeBSD -- sigqueue(2) missing capability mode restriction

Problem Description: sigqueue2 was marked as permitted in capability mode with the introduction of Capsicum in 2011, but the implementation of kernsigqueue did not include a capability mode check restricting signal delivery to the calling process's own PID. Impact: A process in capability mode ca...