EUVD-2021-31706

Malicious code in bioql PyPI...

EUVD-2021-8021

Malicious code in bioql PyPI...

EUVD-2022-7177

Malicious code in bioql PyPI...

EUVD-2022-7306

Malicious code in bioql PyPI...

EUVD-2021-7747

Malicious code in bioql PyPI...

EUVD-2022-7556

Malicious code in bioql PyPI...

EUVD-2022-7756

Malicious code in bioql PyPI...

EUVD-2022-4751

Malicious code in bioql PyPI...

EUVD-2022-34368

Malicious code in bioql PyPI...

EUVD-2023-0953

Malicious code in bioql PyPI...

EUVD-2022-7075

Malicious code in bioql PyPI...

EUVD-2022-1674

Malicious code in bioql PyPI...

EUVD-2025-7693

Malicious code in bioql PyPI...

Cl0p-Linked Gang Attempts to Extort Oracle E-Business Customers

A ‘high-volume’ extortion campaign possibly linked to FIN11 and Cl0p is targeting Oracle E-Business executives. Mandiant and GTIG are investigating unproven data theft claims...

CVE-2025-10759

A vulnerability was detected in Webkul QloApps up to 1.7.0. This affects an unknown function of the component CSRF Token Handler. Performing manipulation of the argument token results in authorization bypass. The attack may be initiated remotely. The exploit is now public and may be used. The...

Chinese Network Selling Thousands of Fake US and Canadian IDs

New investigation exposes a China-based ring that sold over 6,500 fake United States and Canadian IDs using well-planned covert packaging. Learn how this operation threatens national security and enables financial crime...

Microsoft Still Uses RC4

Senator Ron Wyden has asked the Federal Trade Commission to investigate Microsoft over its continued use of the RC4 encryption algorithm. The letter talks about a hacker technique called Kerberoasting, that exploits the Kerberos authentication system...

GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

Salesloft has revealed that the data breach linked to its Drift application started with the compromise of its GitHub account. Google-owned Mandiant, which began an investigation into the incident, said the threat actor, tracked as UNC6395, accessed the Salesloft GitHub account from March through...

Salesloft Drift Supply Chain Incident

We recently became aware of a widespread Salesloft / Drift supply chain incident that impacted third-party integrations with Drift. We are providing this update as part of our commitment to transparency and keeping our customers informed about the security of our platform and products. The key...

Perplexity AI ignores no-crawling rules on websites, crawls them anyway

Imagine putting up a no-trespassing sign for people walking their dogs, and then finding out that one person dresses up their Great Dane as a calf and walks it on your grounds. Well that's sort of what AI answer engine Perplexity has been doing, by evading the no-crawl directives of websites,...