EUVD-2022-0410

Malicious code in bioql PyPI...

EUVD-2022-43559

Malicious code in bioql PyPI...

EUVD-2025-24206

Malicious code in bioql PyPI...

EUVD-2022-0066

Malicious code in bioql PyPI...

EUVD-2022-43061

Malicious code in bioql PyPI...

EUVD-2022-0397

Malicious code in bioql PyPI...

EUVD-2023-58837

Malicious code in bioql PyPI...

EUVD-2021-28525

Malicious code in bioql PyPI...

EUVD-2022-0415

Malicious code in bioql PyPI...

EUVD-2022-0054

Malicious code in bioql PyPI...

EUVD-2025-19906

Malicious code in bioql PyPI...

EUVD-2022-0386

Malicious code in bioql PyPI...

EUVD-2024-25945

Malicious code in bioql PyPI...

EUVD-2025-25830

Malicious code in bioql PyPI...

Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer

A threat actor named Detour Dog has been outed as powering campaigns distributing an information stealer known as Strela Stealer. That's according to findings from Infoblox, which found the threat actor to maintain control of domains hosting the first stage of the stealer, a backdoor called...

Explainable but Vulnerable: Adversarial Attacks on XAI Explanation in Cybersecurity Applications

Explainable Artificial Intelligence XAI has aided machine learning ML researchers with the power of scrutinizing the decisions of the black-box models. XAI methods enable looking deep inside the models' behavior, eventually generating explanations along with a perceived trust and transparency...

MAL-2025-47885 Malicious code in helper-validator-identifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0951c3ea5fbcafe74c05ac02d253d369e25a8cb9904f448f047a9c8b38d693f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Cybersecurity researchers have flagged a malicious package on the Python Package Index PyPI repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems. The deceptive...

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

From unpatched cars to hijacked clouds, this week's Threatsday headlines remind us of one thing — no corner of technology is safe. Attackers are scanning firewalls for critical flaws, bending vulnerable SQL servers into powerful command centers, and even finding ways to poison Chrome's settings t...

AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.

...