MAL-2025-71309 Malicious code in united-plum-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea82fdc7ef193e7155758160395eac8f6aa8bb71637d861681cddac5d4f8a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51343

Malicious code in united-blush-bandicoot npm...

EUVD-2025-51340

Malicious code in united-plum-caribou npm...

Malicious code in united-emerald-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b419fc06d99cdfbd2a827aa4e894446eb6702f371b391b85ec9ff219aac0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51342

Malicious code in united-emerald-coyote npm...

PT-2025-46160

Name of the Vulnerable Software and Affected Versions Triofox versions prior to 16.7.10368.56560 Description Triofox is vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete. This vulnerability, designated CVE-2025-12480, allows...

Drilling Down on Uncle Sam’s Proposed TP-Link Ban

The U.S. government is reportedly preparing to ban the sale of wireless routers and other networking gear from TP-Link Systems , a tech company that currently enjoys an estimated 50% market share among home users and small businesses. Experts say while the proposed ban may have more to do with...

Cyberattacks on UK water systems reveal rising risks to critical infrastructure

Digital intruders have been targeting UK drinking water systems in what seems to be a growing risk. Recorded Future News sent a request to the UK's Drinking Water Inspectorate DWI, the organization responsible for ensuring that drinking water is safe, for details on cyberattacks affecting the...

UK Court Delivers Split Verdict in Getty Images vs. Stability AI Case

In January 2023, Getty Images filed a major lawsuit in the UK High Court against Stability AI, an…...

Bob Flores, Former CTO of the CIA, Joins Brinker

Delaware, United States, 4th November 2025, CyberNewsWire...

Lenovo Tablet Vulnerability - Lenovo Support US

No description provided...

Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody

A Ukrainian man indicted in 2012 for conspiring with a prolific hacking group to steal tens of millions of dollars from U.S. businesses was arrested in Italy and is now in custody in the United States, KrebsOnSecurity has learned. Sources close to the investigation say Yuriy Igorevich Rybtsov , a...

Ukrainian Conti Ransomware Suspect Extradited to US from Ireland

Ukrainian man accused of helping run Conti ransomware extradited from Ireland to the U.S. to face charges over global cyberattacks and $150M in ransom payments...

Spyware-Plugged ChatGPT, DALL·E and WhatsApp Apps Target US Users

Are you using a fake version of a popular app? Appknox warns US users about malicious brand clones hiding on third-party app stores. Protect yourself from hidden spyware and ‘commercial parasites.’...

编号撤回

Nagios Fusion is a centralized monitoring and visualization platform from Nagios Corporation in the United States. This CVE number has been withdrawn...

US Teen Indicted in 764 Network Case Involving Exploitation Crimes

US teen indicted for involvement in extremist “764” network, accused of child exploitation, animal cruelty, and cyberstalking, says the Justice Department...

Around 70 countries sign new UN Cybercrime Convention—but not everyone’s on board

Around 70 countries have signed the new United Nations UN Convention against Cybercrime—the first global treaty designed to combat cybercrime through unified international rules and cooperation. The treaty needs at least 40 UN member states to ratify it before it becomes international law. Once t...

Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation

The threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world, according to new findings from Palo Alto Networks Unit 42. "Although these domains are...

RDSEED Failure on AMD Zen 5 Processors - Lenovo Support US

No description provided...

AudioFile 安全漏洞

AudioFile is a simple C++ library containing only header files by the individual developer Adam Stark in the UK. It is used to read and write audio files. A security vulnerability exists in AudioFile version v0.3.7, which stems from a null pointer dereference in the ModuleState::setup function...