[SECURITY] Fedora 42 Update: fcitx5-chewing-5.1.9-1.fc42

fcitx5-chewing is a Chewing Wrapper for Fcitx. Chewing is a set of free intelligent Chinese Phonetic IME...

[SECURITY] Fedora 42 Update: fcitx5-rime-5.1.12-1.fc42

RIME=E4=B8=AD=E5=B7=9E=E9=9F=BB=E8=BC=B8=E5=85=A5=E6=B3=95=E5=BC=95=E6=93=8E is mainly a Traditional Chinese input method engine...

Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation

The threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world, according to new findings from Palo Alto Networks Unit 42. "Although these domains are...

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft SharePoint to breach a telecommunications company in the Middle East after it was publicly disclosed and patched in July 2025. Also targeted were government departments in an African country, as well as...

Chinese gangs made over $1 billion targeting Americans with scam texts

We regularly warn our readers about new scams and phishing texts. Almost everyone gets pestered with these messages. But where are all these scam texts coming from? According to an article in The Wall Street Journal: “It has become a billion-dollar, highly sophisticated business benefiting...

CVE-2023-28815

CVE-2023-28815 concerns Hikvision’s iSecure Center product, where insufficient parameter validation enables a command-injection vulnerability. Affected software is described as released for China’s domestic market only, with no overseas release. The vulnerability could allow an attacker to gain p...

Lenovo LeCloud 安全漏洞

Lenovo LeCloud is an application from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo LeCloud that stems from certain conditions that could lead to information disclosure...

Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave

Threat actors with suspected ties to China have turned a legitimate open-source monitoring tool called Nezha into an attack weapon, using it to deliver a known malware called Gh0st RAT to targets. The activity, observed by cybersecurity company Huntress in August 2025, is characterized by the use...

OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks

OpenAI on Tuesday said it disrupted three activity clusters for misusing its ChatGPT artificial intelligence AI tool to facilitate malware development. This includes a Russian‑language threat actor, who is said to have used the chatbot to help develop and refine a remote access trojan RAT, a...

EUVD-2000-0920

Malware in sbrugna...

EUVD-2013-3791

Malware in sbrugna...

EUVD-2011-3926

Malware in sbrugna...

EUVD-2011-2004

Malware in sbrugna...

EUVD-2025-21313

Malicious code in bioql PyPI...

EUVD-2025-18973

Malicious code in bioql PyPI...

EUVD-2024-0166

Malicious code in bioql PyPI...

EUVD-2025-23774

Malicious code in bioql PyPI...

Yoshop 安全漏洞

Yoshop is a Chinese yiovo open source e-commerce system. A security vulnerability exists in Yoshop version 2.0, which originates from unvalidated goodsIds parameter and may lead to SQL injection attack...

Chinese APT Phantom Taurus Targeted MS Exchange Servers Over 3 Years

Cybersecurity researchers at Palo Alto Networks' Unit 42 say Chinese APT Phantom Taurus breached Microsoft Exchange servers for years using a backdoor to spy on diplomats and defense data...

PT-2025-39765

Name of the Vulnerable Software and Affected Versions WordPress Search Exclude plugin versions up to and including 2.5.7 Description The WordPress Search Exclude plugin contains a flaw that allows unauthorized modification of data. This is due to an inadequate capability check within the Base::ge...