EUVD-2025-23896

Malicious code in bioql PyPI...

EUVD-2024-3352

Malicious code in bioql PyPI...

EUVD-2024-54030

Malicious code in bioql PyPI...

EUVD-2022-4654

Malicious code in bioql PyPI...

EUVD-2024-53295

Malicious code in bioql PyPI...

EUVD-2022-34447

Malicious code in bioql PyPI...

EUVD-2022-25147

Malicious code in bioql PyPI...

EUVD-2024-2580

Malicious code in bioql PyPI...

EUVD-2022-41782

Malicious code in bioql PyPI...

EUVD-2024-2478

Malicious code in bioql PyPI...

EUVD-2022-35094

Malicious code in bioql PyPI...

EUVD-2025-23817

Malicious code in bioql PyPI...

NiceGUI 跨站脚本漏洞

NiceGUI is an easy-to-use, Python-based UI framework open-sourced by NiceGUI. A cross-site scripting vulnerability exists in NiceGUI 2.24.2 and earlier versions that stems from not enforcing HTML or JavaScript cleanup, which could lead to cross-site scripting attacks...

CVE-2025-61595 MANTRA tx gas limit is not enforced in send hooks

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract,...

Operation Cronos and the Takedown of LockBit: A Cybersecurity Milestone

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Introduction LockBit aka ABCD Ransomware, one of the most destructive ransomware groups in history, was dismantled in early 2024 through a...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

Sex offenders, terrorists, drug dealers, exposed in spyware breach

We've covered spyware and stalkerware leaks many times before, but we don't often see such exposure in software used by law enforcement. According to a report by Straight Arrow News SAN, the hacker “wikkid” said the intrusion against RemoteCOM was “one of the easiest” they’d ever carried out...

CVE-2025-56449

A security vulnerability exists in Obsidian Scheduler versions 5.0.0 through 6.3.0 within its REST API . The flaw allows accounts locked out for failing to enroll in Multi-Factor Authentication (MFA) to still authenticate using Basic Authentication to perform administrative actions. Specifically,...

Avoid Using Programs Labeled unconfined_service_t

The purpose of setting the unconfinedservicet label for SELinux is to enable some third-party service processes not configured with SELinux policies to run without restrictions. By default, when systemd runs a third-party application whose label is bint or usrt generally located in directories su...

Police using drones to read your license plates, warns EFF

Police are using drones as flying automated license plate readers ALPRs, according to a report by the Electronic Frontier Foundation EFF. And where there is a market, a provider will jump in. Or was it the other way around this time? Flock Safety, for example, recently told a group of potential l...