EUVD-2025-32583

Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic could therefore obtain sensitive information or tamper with the traffic to control affected devices. This affects YoLin...

Inside Microsoft Threat Intelligence: Calm in the chaos

Leading Through the Worst Day Incident response is never orderly. Threat actors don’t wait. Environments are compromised. Data is missing. Confidence is shaken. But for Microsoft’s Incident Response IR team, that chaos is exactly where the work begins. In Episode 1, we showed how Microsoft Threat...

Inside Microsoft Threat Intelligence: Calm in the chaos

Leading Through the Worst Day Incident response is never orderly. Threat actors don’t wait. Environments are compromised. Data is missing. Confidence is shaken. But for Microsoft’s Incident Response IR team, that chaos is exactly where the work begins. In Episode 1, we showed how Microsoft Threat...

CVE-2025-58581 Information Disclosure Through Stacktrace-/MQTT/Config/changeAll

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the application...

CVE-2025-59448

CVE-2025-59448 concerns the YoSmart YoLink ecosystem, where components including the YoLink Hub 0382, YoLink Mobile Application 1.40.41, and YoLink MQTT Broker communicate over the internet using unencrypted MQTT. The vulnerability arises from insecure transmission, allowing an attacker who can m...

Cyber Warfare during Operation Sindoor: Malware Campaign Analysis and Detection Framework

Rapid digitization of critical infrastructure has made cyberwarfare one of the important dimensions of modern conflicts. Attacking the critical infrastructure is an attractive pre-emptive proposition for adversaries as it can be done remotely without crossing borders. Such attacks disturb the...

RLSA-2025:12831 Moderate: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CVSS score...

EUVD-2023-49610

Malicious code in bioql PyPI...

EUVD-2022-40627

Malicious code in bioql PyPI...

EUVD-2023-39356

Malicious code in bioql PyPI...

EUVD-2024-28323

Malicious code in bioql PyPI...

EUVD-2023-48547

Malicious code in bioql PyPI...

EUVD-2024-2648

Malicious code in bioql PyPI...

EUVD-2024-54968

Malicious code in bioql PyPI...

EUVD-2023-43720

Malicious code in bioql PyPI...

EUVD-2025-25834

Malicious code in bioql PyPI...

EUVD-2023-28530

Malicious code in bioql PyPI...

EUVD-2025-28900

Malicious code in bioql PyPI...

EUVD-2023-2660

Malicious code in bioql PyPI...

EUVD-2024-28392

Malicious code in bioql PyPI...