EUVD-2021-26413

Malware in sbrugna...

EUVD-2021-16615

Malware in sbrugna...

EUVD-2018-20347

Malware in sbrugna...

EUVD-2022-42966

Malicious code in bioql PyPI...

EUVD-2025-6208

Malicious code in bioql PyPI...

EUVD-2021-7095

Malicious code in bioql PyPI...

EUVD-2024-35080

Malicious code in bioql PyPI...

EUVD-2024-51543

Malicious code in bioql PyPI...

EUVD-2021-7094

Malicious code in bioql PyPI...

EUVD-2024-50829

Malicious code in bioql PyPI...

EUVD-2025-25473

Malicious code in bioql PyPI...

EUVD-2023-26140

Malicious code in bioql PyPI...

EUVD-2022-3552

Malicious code in bioql PyPI...

EUVD-2025-24446

Malicious code in bioql PyPI...

IBM License Metric Tool 访问控制错误漏洞

The IBM License Metric Tool is a free tool from International Business Machines IBM that helps IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs. An Access Control Error vulnerability exists in IBM License Metric Tool...

Akamai Is the 2025 Customers' Choice in Online Fraud Detection

...

ShinyHunters and Scattered Spider Linked to Farmers Insurance Data Breach

Farmers Insurance reports a breach affecting 1.1 million customers. Learn how the attack, linked to groups ShinyHunters and…...

CVE-2025-5931

The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5. This is due to the plugin not properly validating a user's identity prior to updating their password during a staff password reset. This makes it possible for...

CVE-2025-9118

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...

postMessaged and Compromised

At Microsoft, securing the ecosystem means more than just fixing bugs—it means proactively hunting for variant classes, identifying systemic weaknesses, and working across teams to protect customers before attackers ever get the chance. This blog highlights one such effort: a deep dive into the...