The Attribution Story of WhisperGate: An Academic Perspective

This paper explores the challenges of cyberattack attribution, specifically APTs, applying the case study approach for the WhisperGate cyber operation of January 2022 executed by the Russian military intelligence service GRU and targeting Ukrainian government entities. The study provides a detail...

EUVD-2011-4735

Malware in sbrugna...

EUVD-2025-11381

Malicious code in bioql PyPI...

EUVD-2025-11380

Malicious code in bioql PyPI...

EUVD-2025-26214

Malicious code in bioql PyPI...

About the security content of iOS 16.7.12 and iPadOS 16.7.12

About the security content of iOS 16.7.12 and iPadOS 16.7.12 This document describes the security content of iOS 16.7.12 and iPadOS 16.7.12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred...

About the security content of iOS 15.8.5 and iPadOS 15.8.5

About the security content of iOS 15.8.5 and iPadOS 15.8.5 This document describes the security content of iOS 15.8.5 and iPadOS 15.8.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

CVE-2025-43300

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in a...

CVE-2025-43300

A critical out-of-bounds write vulnerability exists in Apple's ImageIO framework, specifically within the JPEG Lossless decompression code in RawCamera.bundle . The flaw is triggered by a metadata/stream inconsistency in DNG (Digital Negative) files: the SamplesPerPixel tag in TIFF headers disagr...

CVE-2025-43300

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious imag...

VulnCheck KEV: CVE-2025-43300

Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework...

macOS 15.x < 15.6.1 (124927)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.6.1. It is, therefore, affected by a vulnerability: - Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticat...

PT-2025-34177

Name of the Vulnerable Software and Affected Versions iOS versions prior to 15.8.5 iOS versions 16.x prior to 16.7.12 iOS versions prior to 18.6.2 iPadOS versions prior to 15.8.5 iPadOS versions 16.x prior to 16.7.12 iPadOS versions 17.x prior to 17.7.10 iPadOS versions prior to 18.6.2 macOS...

The SOC files: Rumble in the jungle or APT41’s new target in Africa

Introduction Some time ago, Kaspersky MDR analysts detected a targeted attack against government IT services in the African region. The attackers used hardcoded names of internal services, IP addresses, and proxy servers embedded within their malware. One of the C2s was a captive SharePoint serve...

Urgent: Google Releases Critical Chrome Update for CVE-2025-6558 Exploit Active in the Wild

Google on Tuesday rolled out fixes for six security issues in its Chrome web browser, including one that it said has been exploited in the wild. The high-severity vulnerability in question is CVE-2025-6558 CVSS score: 8.8, which has been described as an incorrect validation of untrusted input in...

Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms

Russian organizations have been targeted as part of an ongoing campaign that delivers a previously undocumented Windows spyware called Batavia. The activity, per cybersecurity vendor Kaspersky, has been active since July 2024. "The targeted attack begins with bait emails containing malicious link...

CVE-2025-43200

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed...

CVE-2025-43200

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed...

CVE-2025-43200

A logic issue in the Messages component allows for a zero-click attack on iOS , iPadOS , macOS , and watchOS due to insufficient validation of input data. An attacker can exploit this by sending a maliciously crafted photo or video via a specially crafted iCloud Link . This vulnerability has been...

CVE-2025-43200

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed...