CLSA-2025-1763597218 TuxCare security update for com.h2database (4 CVEs)

TuxCare rebuilt 2 com.h2database packages to address 4 CVEs. Fixed in 1.4.200-tuxcare.1...

CLSA-2025-1750809966 TuxCare security update for org.apache.thrift (1 CVE)

TuxCare rebuilt 2 org.apache.thrift packages to address 1 CVE. Fixed in 0.9.3.tuxcare.1...

CLSA-2025-1761005192 TuxCare security update for net.minidev (1 CVE)

TuxCare rebuilt 2 net.minidev packages to address 1 CVE. Fixed in 1.3.2-tuxcare.1...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Important Photon OS Security Update - PHSA-2026-5.0-92-0742

Updates of 'grub2' packages of Photon OS have been released...

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

Cybersecurity researchers have discovered two new malicious packages in the Python Package Index PyPI repository that are designed to deliver a remote access trojan called SilentSync on Windows systems. "SilentSync is capable of remote command execution, file exfiltration, and screen capturing,"...

Important Photon OS Security Update - PHSA-2025-5.0-90-0477

Updates of 'grub2' packages of Photon OS have been released...

Low Photon OS Security Update - PHSA-2024-5.0-91-0241

Updates of 'grub2' packages of Photon OS have been released...

Sophisticated 'TajMahal APT Framework' Remained Undetected for 5 Years

Cybersecurity researchers yesterday unveiled the existence of a highly sophisticated spyware framework that has been in operation for at least last 5 years—but remained undetected until recently. DubbedTajMahal by researchers at Kaspersky Lab, the APT framework is a high-tech modular-based malwar...