Search: “jar”

329 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 97 Vulnerability 65 Industry 40 Exploit / PoC 31 Ransomware 30 Threat actor 20 Policy & legal 20 Data breach 12 Phishing & fraud 10 AI tools & infra 4 Research 4 AI research 1 Tools 1 Advisory 1

SeverityAll critical 87 high 95 medium 91 low 58 info 5

CVE-2026-82428: Apache Storm Client: Cross-Tenant Dependency Jar Substitution via Predictable Blob Keys

Apache Storm stores shared dependency jars under predictable Maven-derived blob keys, allowing one tenant to substitute jars other tenants execute.

CVE-2026-82428 affects Apache Storm Client (org.apache.storm:storm-client) versions 3.0.0 before 3.1.0, rated important. Dependency artifacts uploaded with storm jar --artifacts were stored under blob keys derived only from the Maven coordinate, making keys identical and predictable for every cluster user. When a blob already existed, the uploader suppressed the collision, enabling a tenant to substitute dependency jars later executed by other tenants in cross-tenant attacks. Fixed in version 3.1.0.

oss-securitySep 13, 14:23 UTC · 2d agoVulnerability CVE-2026-82428

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

The Hacker NewsJul 25, 12:54 UTC · Jul 25, 2026Vulnerability in the wildCVE-2026-16723

Malware researchers analyzed an intriguing Java ATM Malware

Security AffairsJul 30, 09:26 UTC · Jul 30, 2019Malware

First step in cross

Kaspersky SecurelistMar 3, 15:57 UTC · Mar 3, 2016Malware

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2023Malware

The Story of Manuel’s Java RAT

Security AffairsJan 25, 18:54 UTC · Jan 25, 2019Malware

Continued analysis of the LightsOut Exploit Kit

Cisco TalosMay 2, 17:24 UTC · May 2, 2014Exploit / PoC CVE-2013-2465 CVE-2012-1723 CVE-2013-2423+1 CVEs

Fake Trump sex video used to spread QNode RAT

Security AffairsJan 6, 16:02 UTC · Jan 6, 2021Malware

Trump Sex Scandal Video Is a RAT

Infosecurity MagazineJan 7, 19:31 UTC · Jan 7, 2021Malware

Malware expert analyzed a threat that went undetected for at least 2 years

Security AffairsAug 20, 13:58 UTC · Aug 20, 2018Malware

Analyzing a variant of the GM Bot Android malware

Security AffairsJan 6, 21:22 UTC · Jan 6, 2017Malware

Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content

The Hacker NewsJun 29, 04:18 UTC · Jun 29, 2026Malware

Bloody Wolf Expands Java-based NetSupport RAT Attacks in Kyrgyzstan and Uzbekistan

The Hacker NewsMar 23, 10:44 UTC · Mar 23, 2026Malware

Hackers Using Fake Trump's Scandal Video to Spread QNode Malware

The Hacker NewsJan 6, 14:00 UTC · Jan 6, 2021Malware

The Icefog APT Hits US Targets With Java Backdoor

Kaspersky SecurelistJan 14, 19:55 UTC · Jan 14, 2014Malware

CVE-2026-82426: Apache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location

Apache Storm Nimbus 3.0.0 before 3.1.0 allows arbitrary server-side file read via unvalidated uploadedJarLocation in submitTopology calls.

CVE-2026-82426 (rated important) affects Apache Storm Nimbus (org.apache.storm:storm-server) versions 3.0.0 before 3.1.0. Nimbus accepted the uploadedJarLocation argument of submitTopology/submitTopologyWithOpts as a server-side path and opened it directly, without verifying the caller had actually uploaded that file via beginFileUpload. This enables arbitrary file read on the Nimbus host; the issue is fixed in version 3.1.0.

oss-securitySep 13, 14:19 UTC · 2d agoVulnerability CVE-2026-824261