Inside the 2026 Verizon DBIR: What One Billion Records Revealed About Vulnerability Remediation

The Verizon 2026 Data Breach Investigations Report has been published. Qualys is proud to have served as a research partner and contributor, contributing analysis of more than one billion anonymized vulnerability remediation records across four consecutive DBIR reporting cycles of CISA Known...

PT-2026-36100

CVE-2026-31431 is another reminder that one unpatched vulnerability can turn a small foothold into full system compromise. For businesses running remote teams, cloud workloads, or distributed infrastructure, secure access and layered protection matter more than ever. Patch fast. Limit exposure...

Friday Squid Blogging: How Squid Survived Extinction Events

Science news: Scientists have finally cracked a long-standing mystery about squid and cuttlefish evolution by analyzing newly sequenced genomes alongside global datasets. The research reveals that these bizarre, intelligent creatures likely originated deep in the ocean over 100 million years ago,...

EUVD-2007-2535

Malware in sbrugna...

MAL-2025-14830 Malicious code in ark-survival-ancient-amber-generator (npm)

The package ark-survival-ancient-amber-generator was found to contain malicious code...

Malicious code in updated-ark-survival-ancient-amber-generator (npm)

The package updated-ark-survival-ancient-amber-generator was found to contain malicious code...

MAL-2025-39453 Malicious code in working-ark-survival-primal-pass-generator (npm)

The package working-ark-survival-primal-pass-generator was found to contain malicious code...

Malicious code in ark-survival-ancient-amber-generator (npm)

The package ark-survival-ancient-amber-generator was found to contain malicious code...

MAL-2025-21363 Malicious code in get-ark-survival-ancient-amber-generator (npm)

The package get-ark-survival-ancient-amber-generator was found to contain malicious code...

Malicious code in working-ark-survival-primal-pass-generator (npm)

The package working-ark-survival-primal-pass-generator was found to contain malicious code...

Malicious code in get-ark-survival-ancient-amber-generator (npm)

The package get-ark-survival-ancient-amber-generator was found to contain malicious code...

MAL-2025-23254 Malicious code in instantly-ark-survival-primal-pass-generator (npm)

The package instantly-ark-survival-primal-pass-generator was found to contain malicious code...

MAL-2025-37900 Malicious code in updated-ark-survival-ancient-amber-generator (npm)

The package updated-ark-survival-ancient-amber-generator was found to contain malicious code...

Guardians of the Regime: When and Why Autocrats Create Secret Police

Autocrats use secret police to stay in power, as these organizations deter and suppress opposition to their rule. Existing research shows that secret police are very good at this but, surprisingly, also that they are not as ubiquitous in autocracies as one may assume, existing in less than 50% of...

Top US Consumer Watchdog Has a Plan to Fight Predatory Data Brokers

A new proposal by the Consumer Financial Protection Bureau would use a 54-year-old privacy law to impose new oversight of the data broker industry. But first, the agency must survive Elon Musk...

MAL-2024-9163 Malicious code in latest-update-rules-of-survival-h-a-c-k-esp-antenna-wallh-a-c-k-undetected-4c599m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11727aa1616fcf53ab1ecef882d7fc419215c707bf782df0bfb2999c05307325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The LockBit’s Attempt to Stay Relevant, Its Imposters and New Opportunistic Ransomware Groups

The LockBit’s Attempt to Stay Relevant, Its Imposters and New Opportunistic Ransomware Groups By Jambul Tologonov and John Fokker · April 11, 2024 The Trellix Advanced Research Center has recently observed an uptick of LockBit-related cyber activity surrounding vulnerabilities in ScreenConnect...

Lack of removal of minters reduces chances of survival

Lines of code Vulnerability details Impact It is reasonable to assume there will be occasions of misbehaving minters that will threaten the functioning of the Frankencoin ecosystem and there is no way to disable any such minter without redeploying the contract. Ex. an attacker can deploy a...

survival-edu.com Cross Site Scripting vulnerability OBB-2815154

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

This Week in Spring - July 12th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you? This week Im writing you from sunny Seattle, Washington, where were having our next installment of the SpringOne Tour series. Its been a ton of fun seeing all these fun and friendly faces again and getting to see...