Vulnerability Reports Are Not Special Anymore

A requirement for staying sane while working in public as an open source maintainer is realizing that every issue, PR, and piece of feedback is a present, not an obligation. You can accept it, ignore it, and use it partially or not at all. Except… For years, as lead of the Go Security team at the...

EUVD-2006-0405

Malware in sbrugna...

EUVD-2021-10984

Malware in sbrugna...

EUVD-2019-3424

Malware in sbrugna...

EUVD-2020-30512

Malware in sbrugna...

EUVD-2021-21880

Malware in sbrugna...

EUVD-2002-2422

Malware in sbrugna...

EUVD-2020-6290

Malware in sbrugna...

EUVD-2021-13851

Malware in sbrugna...

EUVD-2025-2407

Malicious code in bioql PyPI...

EUVD-2025-3089

Malicious code in bioql PyPI...

EUVD-2025-5464

Malicious code in bioql PyPI...

EUVD-2024-43133

Malicious code in bioql PyPI...

EUVD-2022-31452

Malicious code in bioql PyPI...

EUVD-2024-54080

Malicious code in bioql PyPI...

EUVD-2024-46250

Malicious code in bioql PyPI...

EUVD-2023-45832

Malicious code in bioql PyPI...

EUVD-2022-2307

Malicious code in bioql PyPI...

Evil Vizier: Vulnerabilities of LLM-Integrated XR Systems

Extended reality XR applications increasingly integrate Large Language Models LLMs to enhance user experience, scene understanding, and even generate executable XR content, and are often called "AI glasses". Despite these potential benefits, the integrated XR-LLM pipeline makes XR applications...

False Reality: Uncovering Sensor-Induced Human-VR Interaction Vulnerability

Virtual Reality VR techniques, serving as the bridge between the real and virtual worlds, have boomed and are widely used in manufacturing, remote healthcare, gaming, etc. Specifically, VR systems offer users immersive experiences that include both perceptions and actions. Various studies have...