923 matches found
EUVD-2023-2803
Malicious code in bioql PyPI...
EUVD-2022-5605
Malicious code in bioql PyPI...
EUVD-2024-0021
Malicious code in bioql PyPI...
EUVD-2023-2866
Malicious code in bioql PyPI...
EUVD-2023-2765
Malicious code in bioql PyPI...
EUVD-2025-15579
Malicious code in bioql PyPI...
EUVD-2023-2914
Malicious code in bioql PyPI...
EUVD-2023-2724
Malicious code in bioql PyPI...
EUVD-2023-2555
Malicious code in bioql PyPI...
EUVD-2025-15886
Malicious code in bioql PyPI...
Google and Flo to pay $56 million after misusing users’ health data
Popular period-tracking app Flo Health shared users’ intimate health data—such as menstrual cycles and fertility information—with Google and Meta, allegedly for targeted advertising purposes, according to multiple class-action lawsuits filed in the US and Canada. Between 2016 and 2019, the...
A Systematic Survey of Empirical User Studies of Unintentional Information Disclosure in Everyday Digital Interaction
The exchange of personal information in digital environments poses significant risks, including identity theft, privacy breaches, and data misuse. Addressing these challenges requires a deep understanding of user behavior and mental models in diverse contexts. This paper presents a systematic...
LLM Detected
The scanner detected the presence of a Large Language Model LLM on the target application. LLMs are advanced AI models capable of understanding and generating human-like text based on the input they receive. They are commonly used in various applications, including chatbots, virtual assistants,...
Missing Authorization
Overview ethyca-fides is an Open-source ecosystem for data privacy as code. Affected versions of this package are vulnerable to Missing Authorization via the OAuth client creation and update process. An attacker can gain unauthorized access to owner-level privileges by assigning arbitrary scopes ...
Risk Assessment and Security Analysis of Large Language Models
As large language models LLMs expose systemic security challenges in high risk applications, including privacy leaks, bias amplification, and malicious abuse, there is an urgent need for a dynamic risk assessment and collaborative defence framework that covers their entire life cycle. This paper...
Dow’s 125-year legacy: Innovating with AI to secure a long future
Founded more than 125 years ago, Dow has demonstrated a commitment to leveraging science to make the world a better place. Today, Dow’s ambition to be the most innovative, inclusive, and sustainable materials science company is supported by a global security team dedicated to keeping employees,...
Overcoming Risks from Chinese GenAI Tool Usage
A recent analysis of enterprise data suggests that generative AI tools developed in China are being used extensively by employees in the US and UK, often without oversight or approval from security teams. The study, conducted by Harmonic Security, also identifies hundreds of instances in which...
On-Premise vs SaaS Data Annotation Platforms Compared
Choosing a data annotation platform? Learn when to use SaaS or on premise based on speed, cost, data privacy, and project scope...
The vulnerability of the Aggregate Term Handler component in the SQLite database management system allows a attacker to compromise privacy, integrity, and accessibility.
The vulnerability of the Aggregate Term Handler component in the SQLite database management system is related to numerical truncation errors. Exploiting this vulnerability could allow an attacker to compromise privacy, integrity, and accessibility of the data...
Split Happens: Combating Advanced Threats with Split Learning and Function Secret Sharing
Split Learning SL -- splits a model into two distinct parts to help protect client data while enhancing Machine Learning ML processes. Though promising, SL has proven vulnerable to different attacks, thus raising concerns about how effective it may be in terms of data privacy. Recent works have...