EUVD-2004-1454

Malware in sbrugna...

EUVD-2015-0741

Malware in sbrugna...

EUVD-2015-0759

Malware in sbrugna...

EUVD-2004-1456

Malware in sbrugna...

EUVD-2018-1237

Malware in sbrugna...

EUVD-2013-3315

Malware in sbrugna...

EUVD-2011-3257

Malware in sbrugna...

EUVD-2011-3281

Malware in sbrugna...

EUVD-2005-2791

Malware in sbrugna...

EUVD-2015-6291

Malware in sbrugna...

EUVD-2015-0742

Malware in sbrugna...

EUVD-2015-6242

Malware in sbrugna...

EUVD-2006-4089

Malware in sbrugna...

EUVD-2015-0713

Malware in sbrugna...

EUVD-2022-55210

Malicious code in bioql PyPI...

The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign

The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign By Pham Duy Phuc and Alex Lanstein · August 18, 2025 The Trellix Advanced Research Center uncovered a sophisticated espionage operation targeting diplomatic missions across several regions in South Korea during...

Scammers mass-mailing the Efimer Trojan to steal crypto

Introduction In June, we encountered a mass mailing campaign impersonating lawyers from a major company. These emails falsely claimed the recipient's domain name infringed on the sender's rights. The messages contained the Efimer malicious script, designed to steal cryptocurrency. This script als...

AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown

Cybersecurity researchers have flagged a malicious npm package that was generated using artificial intelligence AI and concealed a cryptocurrency wallet drainer. The package, @kodane/patch-manager, claims to offer "advanced license validation and registry optimization utilities for high-performan...

Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware

Threat actors have been observed exploiting a now-patched critical SAP NetWeaver flaw to deliver the Auto-Color backdoor in an attack targeting a U.S.-based chemicals company in April 2025. "Over the course of three days, a threat actor gained access to the customer's network, attempted to downlo...

CVE-2025-31965

CVE-2025-31965 concerns HCL BigFix Remote Control Server WebUI, affected on version 10.1.0.0248 and earlier. The root issue is improper access restrictions that allow non-admin users to view unauthorized information on certain pages (authorization bypass). The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R...