EUVD-2022-36039

Malicious code in bioql PyPI...

EUVD-2021-8647

Malicious code in bioql PyPI...

EUVD-2022-30914

Malicious code in bioql PyPI...

EUVD-2022-48091

Malicious code in bioql PyPI...

EUVD-2024-37416

Malicious code in bioql PyPI...

EUVD-2022-48092

Malicious code in bioql PyPI...

EUVD-2021-29084

Malicious code in bioql PyPI...

EUVD-2022-31338

Malicious code in bioql PyPI...

EUVD-2024-37737

Malicious code in bioql PyPI...

EUVD-2021-30758

Malicious code in bioql PyPI...

EUVD-2024-37743

Malicious code in bioql PyPI...

EUVD-2024-37741

Malicious code in bioql PyPI...

EUVD-2022-7010

Malicious code in bioql PyPI...

EUVD-2025-27373

Malicious code in bioql PyPI...

EUVD-2023-43242

Malicious code in bioql PyPI...

BIT-POWERSHELL-2025-49734 PowerShell Direct Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally...

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Cybersecurity researchers have flagged a malicious package on the Python Package Index PyPI repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems. The deceptive...

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks

The Russian advanced persistent threat APT group known as COLDRIVER has been attributed to a fresh round of ClickFix-style attacks designed to deliver two new "lightweight" malware families tracked as BAITSWITCH and SIMPLEFIX. Zscaler ThreatLabz, which detected the new multi-stage ClickFix campai...

Zscaler Client Connector < 4.2.1 Improper Preservation of Permissions (CVE-2024-23464)

The version of Zscaler Client Connector installed on the remote Windows host is prior to 4.2.1. It is, therefore, affected by a vulnerability. - In certain cases, Zscaler Internet Access ZIA can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows...

CVE-2025-59270

psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.2...