/
countries:Germany × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

safedep.io · high

Typosquat npm chain ioredis-xyz → redis-type-xyz → ulid-xyz delivers MicrosoftSystem64 RAT, linked to DPRK FAMOUS CHOLLIMA

SafeDep flagged the malicious npm package ulid-xyz in June 2026. It typosquats ulidx and is a cross-platform remote access trojan. It is delivered through a three-layer transitive dependency chain: ioredis-xyz (a clone of the legitimate ioredis client) depends on redis-type-xyz (an empty manifest posing as Redis OM), which in version 1.10…

FAMOUS CHOLLIMA technology software development
securityweek.com · medium

Rapid7 Q3 2026: High-severity flaws exploited in 3 days on average, ransomware dominates, AI limited to 8% of incidents

Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…

The Gentlemen Qilin business services manufacturing