Red Hat npm-Pakete kompromittiert – Credential-Stealer Miasma verbreitet
Teaser aus der Quelle
Über 30 npm-Pakete im '@redhat-cloud-services'-Namespace wurden in einem Supply-Chain-Angriff kompromittiert und verbreiteten eine neue Variante der Malware Miasma, die Entwickler-Anmeldedaten stiehlt. Betroffene Entwickler sollten ihre Zugangsdaten überprüfen und npm-Abhängigkeiten auf verdächtige Versionen prüfen.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei BleepingComputer lesenMehr zu compromised
Weitere Advisories
- Ohne Bewertungosv:CLEANSTART-2024-BH66439compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Ohne Bewertungosv:CLEANSTART-2024-AH68885fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine
- Ohne Bewertungosv:CLEANSTART-2026-RB02560WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authent...
- Ohne Bewertungosv:CLEANSTART-2024-DK66902As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation
- Ohne Bewertungosv:CLEANSTART-2024-DY60209compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown
- Ohne Bewertungosv:CLEANSTART-2024-UQ28182compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Ohne Bewertungosv:CLEANSTART-2024-UQ62409By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged pr...
- Ohne Bewertungosv:CLEANSTART-2024-KC30952If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write would have occurred leading to memory corruptio...
Weitere News-Einträge
- Iris Plaza Breach May Have Exposed Data of 7.7 Million CustomersNewsSecurityWeek
- Technical University of Munich (TUM) IT security incident: myTUM passwords stolen, TUMonline taken offlineSicherheitsvorfallpwn.watch
- Cyberattack Hits French Blood Bank Site but No Blood Products Are CompromisedNewsSecurityWeek
- Building incident playbooks for machine identity breachesNewsCSO Online
- Attackers turned OpsShield’s trusted update channel into a supply-chain attackNewsCSO Online
- Binance says hackers who stole billions in crypto spent months planning the heistNewsArs Technica — Security
- Binance says hackers who stole billions in crypto spent months planning heistNewsArs Technica — Security
- APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android ExploitsNewsThe Hacker News
ID