EUVD-2025-38148

An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio RES on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots. To mitigate...

CVE-2025-12815

Summary of CVE-2025-12815 (AWS RES) : An ownership verification issue exists in the Virtual Desktop preview page of the Research and Engineering Studio (RES) on AWS, affecting versions prior to 2025.09. A remote user with network access may be able to view metadata from another user’s active desk...

CVE-2025-12815

An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio RES on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots. To mitigate...

CVE-2025-43455

CVE-2025-43455 is a privacy issue addressed by Apple in iOS 26.1, iPadOS 26.1, watchOS 26.1, macOS Tahoe 26.1, and visionOS 26.1. The vulnerability allowed a malicious app to take screenshots of sensitive information in embedded views. Apple mitigated this by tightening privacy checks and isolati...

North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware

The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality of two of its malware programs, indicating that the hacking group is actively refining its toolset. That's according to new findings from Cisco Talos, which said recent...

BeaverTail and OtterCookie evolve with a new Javascript module

Cisco Talos has uncovered a new attack linked to Famous Chollima, a threat group aligned with North Korea DPRK. This group is known for impersonating hiring organizations to target job seekers, tricking them into installing information-stealing malware to obtain cryptocurrency and user credential...

Web-Application-Security-Testing

Web Application Security Testing — DVWA Lab End-to-end web ap...

EUVD-2020-19491

Malware in sbrugna...

EUVD-2016-6012

Malware in sbrugna...

EUVD-2007-3948

Malware in sbrugna...

EUVD-2021-11351

Malware in sbrugna...

EUVD-2011-2581

Malware in sbrugna...

EUVD-2021-9454

Malicious code in bioql PyPI...

EUVD-2025-16834

Malicious code in bioql PyPI...

EUVD-2023-32042

Malicious code in bioql PyPI...

EUVD-2022-28916

Malicious code in bioql PyPI...

Medusa Ransomware Claims Comcast Data Breach, Demands $1.2M

Medusa ransomware group claims 834 GB data theft from Comcast, demanding $1.2M ransom while sharing screenshots and file listings...

Malicious Package

Overview tensorflowjs is a malicious package. This package contains malicious code that uses a sophisticated typosquatting attack. It employs multi-stage malware with heavy obfuscation to evade detection. The malware's primary function is to steal credentials and capture screenshots from Windows...

Bridging the Gap in Phishing Detection: a Comprehensive Phishing Dataset Collector

To combat phishing attacks -- aimed at luring web users to divulge their sensitive information -- various phishing detection approaches have been proposed. As attackers focus on devising new tactics to bypass existing detection solutions, researchers have adapted by integrating machine learning a...

Phish-Blitz: Advancing Phishing Detection with Comprehensive Webpage Resource Collection and Visual Integrity Preservation

Phishing attacks are increasingly prevalent, with adversaries creating deceptive webpages to steal sensitive information. Despite advancements in machine learning and deep learning for phishing detection, attackers constantly develop new tactics to bypass detection models. As a result, phishing...