EUVD-2022-5529

Malicious code in bioql PyPI...

EUVD-2025-24070

Malicious code in bioql PyPI...

EUVD-2025-24854

Malicious code in bioql PyPI...

EUVD-2024-18073

Malicious code in bioql PyPI...

EUVD-2025-24933

Malicious code in bioql PyPI...

EUVD-2021-6912

Malicious code in bioql PyPI...

EUVD-2022-26009

Malicious code in bioql PyPI...

EUVD-2024-18123

Malicious code in bioql PyPI...

EUVD-2024-18021

Malicious code in bioql PyPI...

EUVD-2021-7040

Malicious code in bioql PyPI...

EUVD-2025-3960

Malicious code in bioql PyPI...

EUVD-2022-25992

Malicious code in bioql PyPI...

EUVD-2022-25980

Malicious code in bioql PyPI...

EUVD-2025-24875

Malicious code in bioql PyPI...

Unmasking Puppeteers: Leveraging Biometric Leakage to Disarm Impersonation in AI-Based Videoconferencing

AI-based talking-head videoconferencing systems reduce bandwidth by sending a compact pose-expression latent and re-synthesizing RGB at the receiver, but this latent can be puppeteered, letting an attacker hijack a victim's likeness in real time. Because every frame is synthetic, deepfake and...

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

From unpatched cars to hijacked clouds, this week's Threatsday headlines remind us of one thing — no corner of technology is safe. Attackers are scanning firewalls for critical flaws, bending vulnerable SQL servers into powerful command centers, and even finding ways to poison Chrome's settings t...

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

From unpatched cars to hijacked clouds, this week’s Threatsday headlines remind us of one thing — no corner of technology is safe. Attackers are scanning firewalls for critical flaws, bending vulnerable SQL servers into powerful command centers, and even finding ways to poison Chrome’s settings t...

Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks

As deep learning models become widely deployed as components within larger production systems, their individual shortcomings can create system-level vulnerabilities with real-world impact. This paper studies how adversarial attacks targeting an ML component can degrade or bypass an entire...

Backdoor Attacks against Speech Language Models

Large Language Models LLMs and their multimodal extensions are becoming increasingly popular. One common approach to enable multimodality is to cascade domain-specific encoders with an LLM, making the resulting model inherit vulnerabilities from all of its components. In this work, we present the...

Chinese APT Phantom Taurus Targeted MS Exchange Servers Over 3 Years

Cybersecurity researchers at Palo Alto Networks' Unit 42 say Chinese APT Phantom Taurus breached Microsoft Exchange servers for years using a backdoor to spy on diplomats and defense data...