Skip to content
Threat Feed
Subscribe

Vendor

OpenSearch

3 briefs RSS
medium advisory

OpenSearch: Authenticated Denial of Service

A vulnerability in OpenSearch allows a remote, authenticated attacker to trigger a Denial of Service condition on the affected instance.

OpenSearch denial-of-service
1t
high advisory

Shai-Hulud Campaign Activity

Tracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.

jscrambler 8.14.0 +102 campaign shai-hulud
20i updated
critical threat

Shai-Hulud Malware Used in Supply Chain Attack via Compromised npm Packages

The Shai-Hulud malware was used in a large-scale software supply-chain attack compromising hundreds of packages across open-source software ecosystems by compromising developer secrets and CI/CD pipelines.

router +11 TeamPCP supply-chain supply-chain-attack npm pypi credential-theft shai-hulud
3r 7t 3i