Sequelize Security Update Advisory (CVE-2026-30951)

Sequelize Security Update Advisory (CVE-2026-30951)

Overview   We have released a security update that addresses a vulnerability in Sequelize. Users of affected products are advised to update to the latest version.     Affected Products   CVE-2026-30951   Sequelize version: 6.37.7 and earlier     Resolved Vulnerabilities   SQL Injection Vulnerability in Sequelize (CVE-2026-30951)  

March 18, 2026

March 18, 2026 Hash 1eb5772845877159df5233597d278ceae 23ae61ec274a3f6c33f714420d89dcf35 39cb0a5a68d81393c56542dab3657b0f1 URL 1http[:]//tracking[.]tgmfr[.]com/aff_c?offer_id=2853&aff_id=2762&aff_sub=xxx&aff_sub2=3f87f-8ba4-da7-50008 2http[:]//futain-china[.]com/ 3https[:]//eohllointeb[.]click/ IP 1137[.]131[.]239[.]171 243[.]157[.]213[.]31 3183[.]101[.]211[.]129...

Apple Family March 2026 1st Security Update Advisory

Apple Family March 2026 1st Security Update Advisory

Overview   Apple(https://apple.com) has released a security update that addresses a vulnerability in a product it has supplied. affected Xeem users are advised to update to the latest version.   Affected Products   IPhone 8 IPhone 8 Plus IPhone X IPad 5th generation IPad Pro 9.7-inch IPad Pro 12.9-inch 1st

Google Chrome browser (146.0.7680.80) security update advisory

Google Chrome browser (146.0.7680.80) security update advisory

Overview   Google has released an update to address a vulnerability in the Chrome(https://www.google.com/chrome) browser. Users of affected versions are advised to update to the latest version.   Affected Products   Chrome before version 146.0.7680.80 (Linux) Chrome before version 146.0.7680.80 (Windows/Mac)   Resolved Vulnerabilities   High-level out-of-bounds write vulnerabilities in

Atlassian Product Security Update Advisory (CVE-2026-21570)

Atlassian Product Security Update Advisory (CVE-2026-21570)

Overview   We have released security updates to fix vulnerabilities in Atlassian products. Users of affected products are advised to update to the latest version.     Affected Products   CVE-2026-21570   Bamboo Data Center and Server versions: 12.1.0 or later and 12.1.2 (LTS) or earlierBamboo Data Center and Server

Veeam Product Security Update Advisory

Veeam Product Security Update Advisory

Overview   Veeam has released security updates that address vulnerabilities in its products. Users of affected products are advised to update to the latest version.     Affected Products   CVE-2026-21666, CVE-2026-21667   Veeam Backup & Replication versions: 12, 12.1, 12.2, 12.3, 12.3.1, 12.3.2   CVE-2026-21669   Veeam Backup &

March 17, 2026

March 17, 2026 Hash 11a661fb7259c22244dfb175cf957afe9 278258b937a700b5755381190cfd2d5ae 3c700930782d193a1515676c07a647c50 URL 1http[:]//91[.]219[.]23[.]145/skimokeep 2http[:]//91[.]219[.]23[.]145/deceit-freebie 3http[:]//91[.]219[.]23[.]145/residentchatting IP 1165[.]232[.]163[.]9 2180[.]180[.]109[.]40 345[.]172[.]152[.]74...

Winos4.0 Malware Disguised as KakaoTalk Installer

Winos4.0 Malware Disguised as KakaoTalk Installer

Distribution Method – SEO Poisoning Typically, people perceive the sites that appear at the top of Google search results as the “most authoritative and official” sites. however, threat actors are playing on the psychology of such users, manipulating the search engine’s algorithms to place malicious sites at the top. SEO

March 16, 2026

March 16, 2026 Hash 1363fec0b48d6673235272205c7b955af 21f621ff2c0b86303f67f74e9eb0add9e 334f243f02f4e9442467b1b6cda3348fe URL 1http[:]//paysuccessfully[.]shop/ 2https[:]//domo[.]co[.]id/ 3http[:]//pl28672493[.]effectivegatecpm[.]com/ IP 1222[.]99[.]179[.]16 2154[.]217[.]235[.]45 3165[.]154[.]22[.]6...

Security Update Advisory for kubectl-mcp-server Command Injection Vulnerability (CVE-2025-69902)

Security Update Advisory for kubectl-mcp-server Command Injection Vulnerability (CVE-2025-69902)

Overview A security update has been made available to address a Command Injection vulnerability in the kubectl-mcp-server project. users of affected versions are advised to update to the latest version.   Affected Products kubectl-mcp-server vulnerable Component: kubectl_mcp_tool/minimal_wrapper.py vulnerable versions: kubectl-mcp-tool 1.1.1 and earlier   Resolved Vulnerabilities Command Injection vulnerability in