611 matches found
MAL-2025-49437 Malicious code in study-lab-e52 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50708d98a0ca76a26e4b2f4ba435e4dec98c82e20f6fa80926cfd924adea2e06 The package study-lab-e52 was found to contain malicious code...
EUVD-2025-38391
Malicious code in study-lab-npm-test npm...
EUVD-2025-38393
Malicious code in study-lab-e52 npm...
Malicious code in study-lab-npm-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc0a35e84f7b481414283261b7ca20709c25f15da68f387188a9eb0def1b523 The package study-lab-npm-test was found to contain malicious code...
MAL-2025-49439 Malicious code in study-lab-npm-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc0a35e84f7b481414283261b7ca20709c25f15da68f387188a9eb0def1b523 The package study-lab-npm-test was found to contain malicious code...
MAL-2025-49438 Malicious code in study-lab-e53 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f58b0eed4e51cbdb6bb234b8c3a4e32bf0ad0a60bdeef7e32ffe7d26ac0d8c The package study-lab-e53 was found to contain malicious code...
MAL-2025-49436 Malicious code in study-lab-e51 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b756a5dc0b496946d6fb90684625cebaac365a7199f1df239818b6bac9cbce5 The package study-lab-e51 was found to contain malicious code...
Malicious code in study-lab-e52 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50708d98a0ca76a26e4b2f4ba435e4dec98c82e20f6fa80926cfd924adea2e06 The package study-lab-e52 was found to contain malicious code...
EUVD-2025-38392
Malicious code in study-lab-e53 npm...
CVE-2025-48089 WordPress Education WordPress Theme | HiStudy theme < 3.1.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through 3.1.0...
PT-2025-45202
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through 3.1.0...
A Large Scale Study of AI-Based Binary Function Similarity Detection Techniques for Security Researchers and Practitioners
Binary Function Similarity Detection BFSD is a foundational technique in software security, underpinning a wide range of applications including vulnerability detection, malware analysis. Recent advances in AI-based BFSD tools have led to significant performance improvements. However, existing...
Sustaining Cyber Awareness: The Long-Term Impact of Continuous Phishing Training and Emotional Triggers
Phishing constitutes more than 90% of successful cyberattacks globally, remaining one of the most persistent threats to organizational security. Despite organizations tripling their cybersecurity budgets between 2015 and 2025, the human factor continues to pose a critical vulnerability. This stud...
Is Protective DNS Blocking the Wild West?
We perform a passive measurement study investigating how a Protective DNS service might perform in a Research & Education Network serving hundreds of member institutions. Utilizing freely-available DNS blocklists consisting of domain names deemed to be threats, we test hundreds of millions of...
Actionable Cybersecurity Notifications for Smart Homes: A User Study on the Role of Length and Complexity
The proliferation of smart home devices has increased convenience but also introduced cybersecurity risks for everyday users, as many devices lack robust security features. Intrusion Detection Systems are a prominent approach to detecting cybersecurity threats. However, their alerts often use...
The Attribution Story of WhisperGate: An Academic Perspective
This paper explores the challenges of cyberattack attribution, specifically APTs, applying the case study approach for the WhisperGate cyber operation of January 2022 executed by the Russian military intelligence service GRU and targeting Ukrainian government entities. The study provides a detail...
Real-World Usability of Vulnerability Proof-Of-Concepts: A Comprehensive Study
The Proof-of-Concept PoC for a vulnerability is crucial in validating its existence, mitigating false positives, and illustrating the severity of the security threat it poses. However, research on PoCs significantly lags behind studies focusing on vulnerability data. This discrepancy can be...
Cybersecurity AI: Evaluating Agentic Cybersecurity in Attack/Defense CTFs
We empirically evaluate whether AI systems are more effective at attacking or defending in cybersecurity. Using CAI Cybersecurity AI's parallel execution framework, we deployed autonomous agents in 23 Attack/Defense CTF battlegrounds. Statistical analysis reveals defensive agents achieve 54.3%...
Improving Cybercrime Detection and Digital Forensics Investigations with Artificial Intelligence
According to a recent EUROPOL report, cybercrime is still recurrent in Europe, and different activities and countermeasures must be taken to limit, prevent, detect, analyze, and fight it. Cybercrime must be prevented with specific measures, tools, and techniques, for example through automated...