Month: June 2025


  • New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

    ![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaxh27Ayyokt88UuoUXGlFAfhJqwlNGGCbNH6GexccG2hf_Cc6A9F8Sujl9T3ad7QqRId6ZIv3gnfVE0YWghhw6TOX5URSEkzA-vebPSBvzrPO11jvQUV6sUVKK7klqJnsuXlQVkf38TJQgaDjI87iVxKYSkz89fVZOiEBnIbhrvP4IrPiWQNcHYhv4CLN/s728-rw-e365/code.jpg)Cybersecurity researchers have [flagged](https://www.aikido.dev/blog/supply-chain-attack-on-react-native-aria-ecosystem) a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware.The malware,…


  • Enterprises are getting stuck in AI pilot hell, say Chatterbox Labs execs

    #### [AI + ML](/software/ai_ml/)**5** Enterprises are getting stuck in AI pilot hell, say Chatterbox Labs execs=========================================================================**5** Security, not model performance,…


  • New Mirai botnet infect TBK DVR devices via command injection flaw

    ![Botnet](https://www.bleepstatic.com/content/hl-images/2025/04/08/botnet-2.jpg)A new variant of the Mirai malware botnet is exploiting a command injection vulnerability in TBK DVR-4104 and DVR-4216 digital…


  • Over 950K weekly downloads at risk in ongoing supply chain attack on Gluestack packages

    A supply chain attack hit NPM, threat actors compromised 16 popular Gluestack packages, affecting 950K+ weekly downloads.————————————————————————————————————————-Researchers from [Aikido Security](https://www.aikido.dev/)…


  • Security Affairs newsletter Round 527 by Pierluigi Paganini – INTERNATIONAL EDITION

    A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs…


  • SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 48

    Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape————————————————————————————————————————————-[Pure Crypter…


  • Hearing on the Federal Government and AI

    Bruce Schneier writes: On Thursday I testified before the House Committee on Oversight and Government Reform at a hearing titled…


  • Wireshark 4.4.7 Released, (Sun, Jun 8th)

    [Wireshark 4.4.7 Released](/forums/diary/Wireshark+447+Released/32020/)=======================================================================* * [](http://www.facebook.com/sharer.php?u=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F32020 ‘Share on Facebook’)* [](http://twitter.com/share?text=Wireshark%204.4.7%20Released&url=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F32020&via=SANS_ISC ‘Share on Twitter’) **Published** : 2025-06-08. **Last Updated** : 2025-06-08 05:15:25…


  • Extracting With pngdump.py, (Sun, Jun 8th)

    [Extracting With pngdump.py](/forums/diary/Extracting+With+pngdumppy/32022/)============================================================================* * [](http://www.facebook.com/sharer.php?u=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F32022 ‘Share on Facebook’)* [](http://twitter.com/share?text=Extracting%20With%20pngdump.py&url=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F32022&via=SANS_ISC ‘Share on Twitter’) **Published** : 2025-06-08. **Last Updated** : 2025-06-08 05:16:10…


  • Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025

    ![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUAQHGfPwsMGi_VlhnfYhfS44xBQLg8SRFOHPc6hkuog7awdUP7oXpgRsbN8Wvlr10p6VEiVOH2HgQgvqJnjFGIkTSggI0cvGu8IzuOB1O6eWfzJHSCnuXtWVK7OjmWN56ATj3oweBnFzoyRSrqp7vaoR-OGCoTspfShKxe6FDa2CgLWG4P3h8rHipe7QQ/s728-rw-e365/chain-1.jpg)Cybersecurity researchers have shed light on a new campaign targeting Brazilian users since the start of 2025 to infect users…