An Evidence-Driven Analysis of Threat Information Sharing Challenges for Industrial Control Systems and Future Directions

The increasing cyber threats to critical infrastructure highlight the importance of private companies and government agencies in detecting and sharing information about threat activities. Although the need for improved threat information sharing is widely recognized, various technical and...

GHSA-3677-XXCR-WJQV vulnerabilities

Vulnerabilities for packages: kayenta, strimzi-kafka-operator, apache-pulsar, kafka, prometheus-jmx-exporter, hadoop-fips, confluent-common-docker, kayenta-fips...

SUSE CVE-2025-14876

A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service DoS on the host system by causing the QEMU process to terminate...

Malicious code in ctfvamp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60afd58ec7b3c88e49140c847bac2c30a9e0e6d9f4f700125d59a3302bb9dac2 The package ctfvamp was found to contain malicious code. Source: ghsa-malware 813e410e18d7609781e8b8a67e5750a2e2652e69245b8a6d343d9ea8364d75a6 Any...

Malicious code in ctfvampir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7326c736b63690c5699af7e755bf0f5fa0663dcfc80c27ae252c7f8b9d57c47 The package ctfvampir was found to contain malicious code. Source: ghsa-malware 20527b160a7dde628dd4ce3ca417fd8a0977612133c8b1a443cdbe9496efb604 Any...

MAL-2025-192622 Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

Malicious code in elf-stats-cocoa-workshop-459 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362f3da17da5b5a6cbb8124715f6d31867664acc26b4bbbe8537ba02c9dc9677 The package elf-stats-cocoa-workshop-459 was found to contain malicious code. Source: ghsa-malware...

Malicious code in viktorparserctf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea8d189f98186e2482dbc1f838c4c1776defe4d30e5dedae00ee7beb3d222be The package viktorparserctf7 was found to contain malicious code. Source: ghsa-malware 18f308383dbcb39c42e9ac4c313b1a6071b4f348bd4793aa099daff963cf03...

Malicious code in ppppparserfruit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b366d76e6719092198989d8a4c7f2796fa7b475889d08f835356746bd32ca32 The package ppppparserfruit was found to contain malicious code. Source: ghsa-malware 4fd640db548f81f7a36d303c19422e90ecfa657300ff3c23d954461bbb0f8c0...

MAL-2025-192617 Malicious code in @xyuxu/i18never (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b923f08dbda49245b6cdc13f30d46556f98e438c1788b29597ff1d64446bf54 The package @xyuxu/i18never was found to contain malicious code. Source: ghsa-malware 3c5087826460532be47bc7b783c6674322cc348a195d708d058f98f7d73ec22...

MAL-2025-192624 Malicious code in chai-nerd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debbd45ba7868f5eca573b8e1aa2ce52439e75cc632f1149ce670f8e3f17abbc The package chai-nerd was found to contain malicious code. Source: ghsa-malware c5a2651b8c60bc1c29940656635411bf52439baa544a902ebf25b1d8c95c276a Any...

GHSA-W853-JP5J-5J7F vulnerabilities

Vulnerabilities for packages: mlflow, airflow, open-webui, py3-cassandra-medusa, kserve...

Linux Distros Unpatched Vulnerability : CVE-2025-14860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 146.0.1. CVE-2025-14860 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2025-14956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file...

SUSE: Security Advisory (SUSE-SU-2025:4429-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CISA Releases Nine Industrial Control Systems Advisories

CISA released nine Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-352-01 Inductive Automation Ignition ICSA-25-352-02 Schneider Electric EcoStruxure Foxboro DCS Advisor...

National Instruments LabView

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

Rockwell Automation Micro820, Micro850, Micro870

RISK EVALUATION Successful exploitation of these vulnerabilities could result in a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all control...

CVE-2025-68462

Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...

SUSE CVE-2025-43529

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code...