Aggregator

Threat Actors Exploit Discord Webhooks for C2 via npm, PyPI, and Ruby Packages

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
8 months 3 weeks ago

Threat actors are increasingly abusing Discord webhooks as covert command-and-control (C2) channels inside open-source packages, enabling stealthy exfiltration of secrets, host telemetry, and developer environment data without standing up bespoke infrastructure. Socket’s Threat Research Team has documented active abuse across npm, PyPI, and RubyGems, where hard-coded Discord webhook URLs act as write-only sinks to siphon […]

The post Threat Actors Exploit Discord Webhooks for C2 via npm, PyPI, and Ruby Packages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kaaviya

Clop Ransomware group claims the hack of Harvard University

Security Affairs
8 months 3 weeks ago
The notorious Clop Ransomware group claims the hack of Harvard University and added the prestigious institute to its Tor data leak site. The Clop Ransomware group announced the hack of the prestigious Harvard University. The cybercrime group created a page for the university on its Tor data leak site and announced it will leak the […]
Pierluigi Paganini

NDSS 2025 – Keynote 2: Towards Resilient Systems In An Increasingly Hostile World

Security Boulevard
8 months 3 weeks ago

Author, Creator & Presenter: Dr. Kathleen Fisher PhD, Director, Information Innovation Office (I2O), US Defense Advanced Research Projects Agency (DARPA)

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the organization’s’ YouTube channel.

Permalink

The post NDSS 2025 – Keynote 2: Towards Resilient Systems In An Increasingly Hostile World appeared first on Security Boulevard.

Marc Handelman

CVE-2025-9185 | Mozilla Thunderbird up to 141 memory corruption (Nessus ID 252327 / WID-SEC-2025-1866)

Vuldb Updates
8 months 3 weeks ago
A vulnerability labeled as critical has been found in Mozilla Thunderbird up to 141. Affected by this vulnerability is an unknown functionality. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-2025-9185. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.
vuldb.com

CVE-2025-9186 | Mozilla Firefox up to 141 on Android Address Bar clickjacking (Nessus ID 260169 / WID-SEC-2025-1866)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as problematic has been found in Mozilla Firefox up to 141 on Android. This vulnerability affects unknown code of the component Address Bar. Performing manipulation results in clickjacking. This vulnerability is reported as CVE-2025-9186. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-9184 | Mozilla Thunderbird up to 141 memory corruption (Nessus ID 258109 / WID-SEC-2025-1866)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in Mozilla Thunderbird up to 141. The impacted element is an unknown function. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2025-9184. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-9182 | Mozilla Thunderbird up to 141 WebRender denial of service (Nessus ID 254415 / WID-SEC-2025-1866)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as problematic was found in Mozilla Thunderbird up to 141. Affected by this issue is some unknown functionality of the component WebRender. Such manipulation leads to denial of service. This vulnerability is traded as CVE-2025-9182. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-9183 | Mozilla Firefox up to 141 Address Bar clickjacking (Nessus ID 258109 / WID-SEC-2025-1866)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 141. This affects an unknown part of the component Address Bar. Performing manipulation results in clickjacking. This vulnerability is known as CVE-2025-9183. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

Managed ad