New Mirai botnet infect TBK DVR devices via command injection flaw
A new variant of the Mirai malware botnet is exploiting a command injection vulnerability in TBK DVR-4104 and DVR-4216 digital video recording devices to hijack…
Author: Cybernoz
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally
Cybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware. The malware, introduced via a change…
Over 950K weekly downloads at risk in ongoing supply chain attack on Gluestack packages
Over 950K weekly downloads at risk in ongoing supply chain attack on Gluestack packages Pierluigi Paganini June 08, 2025 A supply chain attack hit NPM,…
Security Affairs newsletter Round 527 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 527 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini June 08, 2025 A new round of the weekly Security Affairs newsletter…
Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025
Jun 08, 2025Ravie LakshmananMalware / Browser Security Cybersecurity researchers have shed light on a new campaign targeting Brazilian users since the start of 2025 to…
Jwt-Hack: Reborn in Rust | HAHWUL
jwt-hack v2 is a complete Rust rewrite, boosting performance, safety, and stability. Back in October 2020, I created a tool called jwt-hack to make security…
DevSecOps | HAHWUL
Roadmap for everyone who wants DevSecOps DevSecOps is a culture and practice that aims to integrate security into every phase of the software development lifecycle…
Week in review: Google fixes exploited Chrome zero-day, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: June 2025 Patch Tuesday forecast: Second time is the charm?Microsoft…
Malicious npm packages posing as utilities delete project directories
Two malicious packages have been discovered in the npm JavaScript package index, which masquerades as useful utilities but, in reality, are destructive data wipers that…
Supply chain attack hits Gluestack NPM packages with 960K weekly downloads
A significant supply chain attack hit NPM after 16 popular Gluestack ‘react-native-aria’ packages with over 950,000 weekly downloads were compromised to include malicious code that acts…
Over 20 Malicious Apps on Google Play Target Users for Seed Phrases
A recent investigation by threat intelligence firm Cyble has spotted a campaign targeting cryptocurrency users through the Google Play Store with more than 20 malicious…
Experts found 4 billion user records online, the largest known leak of Chinese personal data from a single source
Experts found 4 billion user records online, the largest known leak of Chinese personal data from a single source Pierluigi Paganini June 07, 2025 Over…