3405 matches found
EUVD-2020-28102
Malware in sbrugna...
EUVD-2020-28101
Malware in sbrugna...
EUVD-2020-12262
Malware in sbrugna...
EUVD-2020-12461
Malware in sbrugna...
SpyChain: Multi-Vector Supply Chain Attacks on Small Satellite Systems
Small satellites are integral to scientific, commercial, and defense missions, but reliance on commercial off-the-shelf COTS hardware broadens their attack surface. Although supply chain threats are well studied in other cyber-physical domains, their feasibility and stealth in space systems remai...
EUVD-2025-32583
Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic could therefore obtain sensitive information or tamper with the traffic to control affected devices. This affects YoLin...
Inside Microsoft Threat Intelligence: Calm in the chaos
Leading Through the Worst Day Incident response is never orderly. Threat actors don’t wait. Environments are compromised. Data is missing. Confidence is shaken. But for Microsoft’s Incident Response IR team, that chaos is exactly where the work begins. In Episode 1, we showed how Microsoft Threat...
Inside Microsoft Threat Intelligence: Calm in the chaos
Leading Through the Worst Day Incident response is never orderly. Threat actors don’t wait. Environments are compromised. Data is missing. Confidence is shaken. But for Microsoft’s Incident Response IR team, that chaos is exactly where the work begins. In Episode 1, we showed how Microsoft Threat...
CVE-2025-58581 Information Disclosure Through Stacktrace-/MQTT/Config/changeAll
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the application...
CVE-2025-59448
CVE-2025-59448 concerns the YoSmart YoLink ecosystem, where components including the YoLink Hub 0382, YoLink Mobile Application 1.40.41, and YoLink MQTT Broker communicate over the internet using unencrypted MQTT. The vulnerability arises from insecure transmission, allowing an attacker who can m...
Cyber Warfare during Operation Sindoor: Malware Campaign Analysis and Detection Framework
Rapid digitization of critical infrastructure has made cyberwarfare one of the important dimensions of modern conflicts. Attacking the critical infrastructure is an attractive pre-emptive proposition for adversaries as it can be done remotely without crossing borders. Such attacks disturb the...
RLSA-2025:12831 Moderate: opentelemetry-collector security update
Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CVSS score...
EUVD-2024-42498
Malicious code in bioql PyPI...
EUVD-2024-28392
Malicious code in bioql PyPI...
EUVD-2024-38044
Malicious code in bioql PyPI...
EUVD-2023-2660
Malicious code in bioql PyPI...
EUVD-2023-28530
Malicious code in bioql PyPI...
EUVD-2023-28562
Malicious code in bioql PyPI...