CISA and Partners Release Advisory Update on Akira Ransomware

Today, Cybersecurity and Infrastructure Security Agency CISA, in collaboration with the Federal Bureau of Investigation, Department of Defense Cyber Crime Center, Department of Health and Human Services, and international partners, released an updated joint Cybersecurity Advisory, StopRansomware:...

Important: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

MAL-2025-189724 Malicious code in subscription-nightmare-nightmare-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7cc33633fdcb71ad9cde74bf5f286e45a3fc893122e6cba8a51fd7ffdfec5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-46836)

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...

RHEL 8 : container-tools:rhel8 (RHSA-2025:21232)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21232 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: runc:...

Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 runc: container escape with malicious config due to /dev/console mount and...

Malicious code in item-atm-kujoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c374427d348efacba6764e478e915af649a5ebf8b378f8e6f2b17da1fcfc87e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-kinatuomolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61050d34055c24aeeec2dca1c030f4b584c1d3bff0ec418c52b09438ff93a7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-5317

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

EUVD-2025-111416

Malicious code in markdown-pdf-ophiuchus-lint-dynamo npm...

Moderate: Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update

An update for open-vm-tools is now available for Red Hat Enterprise Linux 9. For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section...

open-vm-tools: Insecure file handling

A vulnerability was found in open-vm-tools. A malicious actor with non-administrative privileges on a guest virtual machine VM may tamper with the local files to trigger insecure file operations within that VM...

CVE-2025-5317

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

CVE-2025-5317

Bitdefender Endpoint Security Tools for Mac (BEST) before version 7.20.52.200087 contains an improper access restriction in a critical folder, enabling local users with administrative privileges (sudo) to bypass uninstall password protection and manually remove the application directory (/Applica...

CVE-2025-5317 Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...

Malicious code in rigid_cobra-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e0028d610d714b33d73cb28c9d9818b39e7ab2df638d9a8ee7ce61e62df5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ragi52-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8775f35122a28d5a15ab8c124f866893fb1f4796fb17aacba171c09a8bdc76ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tiwul31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abfc17b8e2bed9bb2238caef1ad4a0ba1c867d316209f4c95b7ac70443ffe69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83292 Malicious code in arif-mangga97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ced1d2c23f717500adbdc6b30ab9fa1a5b9779cb6ceca04731a206f8f680f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lepet21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70af5c16a01d4e0b70a70c346b6b582ec71d00478a74186216cb669db96d2061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...