Explore >> Select a destination

You are here

 thehackernews.com
Popular NPM Package Hijacked to Publish Crypto-mining Malware
| | snyk.io
The XZ backdoor CVE-2024-3094 | Snyk
2.0 parsecs away

Travel
| | On the 29th of March 2024, the high-stakes investment and prolonged campaign to plant a backdoor in the Linux software library liblzma to gain access to multiple operating systems via Linux distributions was carried out by a malicious actor.
| | www.imperva.com
Imperva Protects Against Critical Apache OFBiz Vulnerability (CVE-2024-45195) | Imperva
3.5 parsecs away

Travel
| | Recently, a critical vulnerability in the widely used Apache OFBiz framework was disclosed, designated CVE-2024-45195. This vulnerability allows for unauthenticated remote code execution (RCE), making it an especially dangerous flaw for organizations using OFBiz in their business operations. An attacker without valid credentials can exploit missing view authorization checks in the web application, bypassing previous [...]
| | www.reversinglabs.com
Malware found in Solana npm library raises the bar for crypto security
1.0 parsecs away

Travel
| | Two recent versions of the Solana web3.js open source library were infected with code to steal private keys, putting crypto platforms and wallets at risk.
| | pentestlab.blog
March 9, 2017 - Penetration Testing Lab
18.8 parsecs away

Travel
| 1 post published by Administrator on March 9, 2017