EUVD-2024-33359

Malicious code in bioql PyPI...

EUVD-2023-48509

Malicious code in bioql PyPI...

EUVD-2023-29945

Malicious code in bioql PyPI...

EUVD-2023-33770

Malicious code in bioql PyPI...

EUVD-2022-41767

Malicious code in bioql PyPI...

EUVD-2025-24290

Malicious code in bioql PyPI...

EUVD-2024-47370

Malicious code in bioql PyPI...

MAL-2025-47885 Malicious code in helper-validator-identifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0951c3ea5fbcafe74c05ac02d253d369e25a8cb9904f448f047a9c8b38d693f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware

Government and telecommunications organizations across Africa, the Middle East, and Asia have emerged as the target of a previously undocumented China-aligned nation-state actor dubbed Phantom Taurus over the past two-and-a-half years. "Phantom Taurus' main focus areas include ministries of forei...

A Global Analysis of Cyber Threats to the Energy Sector: "Currents of Conflict" from a Geopolitical Perspective

The escalating frequency and sophistication of cyber threats increased the need for their comprehensive understanding. This paper explores the intersection of geopolitical dynamics, cyber threat intelligence analysis, and advanced detection technologies, with a focus on the energy domain. We...

Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike

A suspected cyber espionage activity cluster that was previously found targeting global government and private sector organizations spanning Africa, Asia, North America, South America, and Oceania has been assessed to be a Chinese state-sponsored threat actor. Recorded Future, which was tracking...

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns targeting the U.S. government, think tanks, and academic organizations utilizing U.S.-China economic-themed lures. "In this activity, the group masqueraded as the current Chair of the Select Committee on...

DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error

We found two instances in the DragonFly codebase where the first return value of a function is dereferenced even when the function returns an error figures 9.1 and 9.2. This can result in a nil dereference, and cause code to panic. The codebase may contain additional instances of the bug. golang...

PT-2025-37987

Name of the Vulnerable Software and Affected Versions: Armalife versions through 20250916 Description: This issue involves improper neutralization of special elements used in an SQL command, potentially leading to exposure of sensitive information to an unauthorized actor. The vulnerability allow...

MAL-2025-47114 Malicious code in actor-storage (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in actor-storage (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CHILLYHELL macOS Backdoor and ZynorRAT RAT Threaten macOS, Windows, and Linux Systems

Cybersecurity researchers have discovered two new malware families, including a modular Apple macOS backdoor called CHILLYHELL and a Go-based remote access trojan RAT named ZynorRAT that can target both Windows and Linux systems. According to an analysis from Jamf Threat Labs, ChillyHell is writt...

CVE-2025-55052

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2025-53804

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

PT-2025-36893

Name of the Vulnerable Software and Affected Versions: Microsoft Office Plus affected versions not specified Description: The software contains an issue that allows an unauthorized attacker to perform spoofing over a network, potentially leading to exposure of sensitive information...