Security

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This analysis breaks down the

A vulnerability categorized as problematic has been discovered in Red Hat Keycloak. Impacted is an unknown function of the component

A vulnerability was found in decolua 9router up to 0.4.45 and classified as very critical. The affected element is the

A vulnerability was found in Busybox 1.38.0. It has been classified as critical. The impacted element is the function awk_sub

A vulnerability was found in knadh listmonk up to 6.1.x. It has been declared as critical. This affects the function

A vulnerability was found in decolua 9router up to 0.5.1. It has been rated as very critical. This impacts the

A vulnerability categorized as problematic has been discovered in WWBN AVideo up to 29.0. Affected is an unknown function of

A vulnerability identified as problematic has been detected in WWBN AVideo up to 29.0. Affected by this vulnerability is the

A vulnerability labeled as critical has been found in Wekan up to 9.30. Affected by this issue is the function

A vulnerability marked as problematic has been reported in Wekan up to 9.31. This affects an unknown part of the

Indonesia’s telling empty chair on the South China Sea
Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
Cyberattack threatens utterly critical infrastructure in Japan: KFC
Did AI decide who lost their jobs? Meta is heading to court over that question