Malicious code in socket-tau-psi-daemon-upsilon (npm)

The package socket-tau-psi-daemon-upsilon was found to contain malicious code...

MAL-2025-33890 Malicious code in stack-sun-void-tau-water (npm)

The package stack-sun-void-tau-water was found to contain malicious code...

MAL-2025-30786 Malicious code in proxy-compile-private-tau-grep (npm)

The package proxy-compile-private-tau-grep was found to contain malicious code...

MAL-2025-34573 Malicious code in tau-encode-web-sed-small (npm)

The package tau-encode-web-sed-small was found to contain malicious code...

MAL-2025-14389 Malicious code in alpha-tau-project (npm)

The package alpha-tau-project was found to contain malicious code...

Malicious code in yaml-psi-tau-void-quick (npm)

The package yaml-psi-tau-void-quick was found to contain malicious code...

Malicious code in finally-parse-star-tau-zero (npm)

The package finally-parse-star-tau-zero was found to contain malicious code...

Malicious code in code-cloud-zeta-cold-tau (npm)

The package code-cloud-zeta-cold-tau was found to contain malicious code...

Malicious code in stack-sun-void-tau-water (npm)

The package stack-sun-void-tau-water was found to contain malicious code...

MAL-2025-33593 Malicious code in socket-tau-psi-daemon-upsilon (npm)

The package socket-tau-psi-daemon-upsilon was found to contain malicious code...

MAL-2025-14940 Malicious code in assert-tau-eta-good-earth (npm)

The package assert-tau-eta-good-earth was found to contain malicious code...

MAL-2025-17247 Malicious code in code-cloud-zeta-cold-tau (npm)

The package code-cloud-zeta-cold-tau was found to contain malicious code...

Effective Red-Teaming of Policy-Adherent Agents

Task-oriented LLM-based agents are increasingly used in domains with strict policies, such as refund eligibility or cancellation rules. The challenge lies in ensuring that the agent consistently adheres to these rules and policies, appropriately refusing any request that would violate them, while...

CVE-2010-3382

tauex in Tuning and Analysis Utilities TAU 2.16.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CLSA-2024-1732196985 Fix CVE(s): CVE-2020-27765

SECURITY UPDATE: Division by zero vulnerability in segment.c - debian/patches/CVE-2020-27765.patch: Fix averagetau calculation by multiplying instead of dividing by numbernodes in OptimalTau function to prevent incorrect segmentation output - CVE-2020-27765...

SUSE CVE-2010-3382

tauex in Tuning and Analysis Utilities TAU 2.16.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

TAU Threat Analysis: Relations to Hakbit Ransomware

See part one of TAU's Hakbit Ransomware analysis here. Many blue team defenders out there will attest to the fact that ransomware is on the rise, and that ransomware doesn’t appear to be going away any time soon. Ransomware is only one of the numerous types of commodity-based emerging threats whi...

CVE-2019-14033

Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096,...

VMware Carbon Black TAU Threat Analysis: Shlayer (macOS)

Following our initial reporting of this threat, Carbon Black’s Threat Analysis Unit TAU has continued following the Shlayer family of malware and monitoring changes adopted by this campaign. Although detection by antivirus vendors has improved over the past year, the malware authors continue to...

VMware Carbon Black TAU Threat Research: Visualizing Ransomware with MITRE ATT&CK

If no one had ever heard of ransomware prior to May 2017, then one thing that is fairly certain is that the WannaCry ransomware outbreak unquestionably put ransomware on the security radar, and sent shivers up CISO’s and analysts’ spines for the weeks and months that followed. Only a few weeks...