EUVD-2018-14623

Malware in sbrugna...

EUVD-2018-15466

Malware in sbrugna...

EUVD-2021-16882

Malware in sbrugna...

EUVD-2020-22578

Malware in sbrugna...

EUVD-2022-35645

Malicious code in bioql PyPI...

EUVD-2022-36252

Malicious code in bioql PyPI...

EUVD-2022-39090

Malicious code in bioql PyPI...

EUVD-2022-39979

Malicious code in bioql PyPI...

EUVD-2023-36904

Malicious code in bioql PyPI...

EUVD-2023-36901

Malicious code in bioql PyPI...

EUVD-2024-24482

Malicious code in bioql PyPI...

EUVD-2021-34228

Malicious code in bioql PyPI...

EUVD-2024-27270

Malicious code in bioql PyPI...

Characterizing Phishing Pages by JavaScript Capabilities

In 2024, the Anti-Phishing Work Group identified over one million phishing pages. Phishers achieve this scale by using phishing kits -- ready-to-deploy phishing websites -- to rapidly deploy phishing campaigns with specific data exfiltration, evasion, or mimicry techniques. In contrast, researche...

Malicious code in windows-sdks (npm)

The package windows-sdks was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

PT-2025-34562 · Undefined · Undefined

🔥 Android under fire: Two high-severity bugs — CVE-2025-38805 and CVE-2025-38806 — have entered exploit kits. Attackers adapt quickly; don’t be the easy target. Details: https://t.co/tej1yYGlw1 Created by AI. Android ZeroDay...

PT-2025-34561 · Undefined · Undefined

🔥 Android under fire: Two high-severity bugs — CVE-2025-38805 and CVE-2025-38806 — have entered exploit kits. Attackers adapt quickly; don’t be the easy target. Details: https://t.co/tej1yYGlw1 Created by AI. Android ZeroDay...

MAL-2025-15916 Malicious code in bnrn-kits (npm)

The package bnrn-kits was found to contain malicious code...

Malicious code in bnrn-kits (npm)

The package bnrn-kits was found to contain malicious code...

Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts

Cybersecurity researchers have detailed a new cluster of activity where threat actors are impersonating enterprises with fake Microsoft OAuth applications to facilitate credential harvesting as part of account takeover attacks. "The fake Microsoft 365 applications impersonate various companies,...