EUVD-1999-1275

Malware in sbrugna...

EUVD-2013-0260

Malware in sbrugna...

EUVD-2005-0520

Malware in sbrugna...

EUVD-2008-2803

Malware in sbrugna...

EUVD-2025-28860

Malicious code in bioql PyPI...

EUVD-2022-25224

Malicious code in bioql PyPI...

EUVD-2023-29641

Malicious code in bioql PyPI...

EUVD-2022-39030

Malicious code in bioql PyPI...

EUVD-2025-9302

Malicious code in bioql PyPI...

EUVD-2025-23786

Malicious code in bioql PyPI...

EUVD-2024-40931

Malicious code in bioql PyPI...

EUVD-2024-25048

Malicious code in bioql PyPI...

EUVD-2023-2317

Malicious code in bioql PyPI...

EUVD-2022-30457

Malicious code in bioql PyPI...

Malicious ZIP Files Use Windows Shortcuts to Drop Malware

Cybersecurity firm Blackpoint Cyber reveals a new spear phishing campaign targeting executives. Learn how attackers use fraudulent document ZIPs containing malicious shortcut files, leveraging 'living off the land' tactics, and a unique Anti-Virus check to deliver a custom payload...

CVE-2025-43358

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. A shortcut may be able to bypass sandbox restrictions...

CVE-2025-43358

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A shortcut may be able to bypass sandbox restrictions...

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox < 115.

...

ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

Cybersecurity researchers have discovered a new phishing campaign undertaken by the North Korea-linked hacking group called ScarCruft aka APT37 to deliver a malware known as RokRAT. The activity has been codenamed Operation HanKook Phantom by Seqrite Labs, stating the attacks appear to target...

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...