EUVD-2025-8736

Malicious code in bioql PyPI...

EUVD-2025-21004

Malicious code in bioql PyPI...

EUVD-2025-22388

Malicious code in bioql PyPI...

EUVD-2025-31037

Malicious code in bioql PyPI...

EUVD-2023-46169

Malicious code in bioql PyPI...

EUVD-2024-20710

Malicious code in bioql PyPI...

EUVD-2023-1960

Malicious code in bioql PyPI...

EUVD-2024-47631

Malicious code in bioql PyPI...

EUVD-2025-24127

Malicious code in bioql PyPI...

EUVD-2022-29245

Malicious code in bioql PyPI...

EUVD-2024-22910

Malicious code in bioql PyPI...

EUVD-2023-27713

Malicious code in bioql PyPI...

EUVD-2024-32524

Malicious code in bioql PyPI...

EUVD-2025-19601

Malicious code in bioql PyPI...

Scam Facebook groups send malicious Android malware to seniors

An infostealer and banking Trojan rolled into one is making the rounds in Facebook groups aimed at "active seniors". Attackers used social engineering methods to lure targets into joining fake Facebook groups that appeared to promote travel and community activities—such as trips, dance classes, a...

New Android Banking Trojan "Klopatra" Uses Hidden VNC to Control Infected Smartphones

A previously undocumented Android banking trojan called Klopatra has compromised over 3,000 devices, with a majority of the infections reported in Spain and Italy. Italian fraud prevention firm Cleafy, which discovered the sophisticated malware and remote access trojan RAT in late August 2025, sa...

Hitachi Energy Asset Suite (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could result in the manipulation of content or the injection of data with the potential of carrying out further malicious attacks. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

CVE-2025-1396

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

CVE-2025-1396

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...