Cisco FMC static credential vulnerability exploited as a zero-day
Hacking

Cisco FMC static credential vulnerability exploited as a zero-day

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability…

North Korea-linked hackers targeted major NPM packages
Hacking

North Korea-linked hackers targeted major NPM packages

Amazon is sharing new findings about how a threat actor linked to the Democratic People’s Republic of Korea (DPRK) is targeting open source software libraries, the shared building blocks that companies around the world use to develop applications. Amazon Threat Intelligence has…

Kimi K3 and GLM 5.2 can create undetectable malware for $2
Malware & Ransomware

Kimi K3 and GLM 5.2 can create undetectable malware for $2

As part of Incalmo’s mission to make AI safely ubiquitous, we do safety research on the frontier cyber capabilities of models. Recently, to help anti-virus systems stay ahead of the OSS threat frontier, we created PathoGen, a novel system that turns (open) models1 into evasive…

NPM publish-time malware scanning and dual-use metadata
Malware & Ransomware

NPM publish-time malware scanning and dual-use metadata

As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…

Malware Problem
Malware & Ransomware

Malware Problem

Coverage of: Malware Problem