Search: “Python”

518 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 798 Vulnerability 518 Exploit / PoC 248 Ransomware 222 Threat actor 145 Data breach 104 Industry 68 Phishing & fraud 50 Tools 35 Policy & legal 31 Research 31 Advisory 10

SeverityAll critical 647 high 858 medium 569 low 163 info 23

An Easier Way to Keep Old Python Code Healthy and Secure

The Hacker NewsJul 25, 15:47 UTC · Jul 25, 2022Vulnerability

55

PyREBox, a Python Scriptable Reverse Engineering Sandbox

Cisco TalosJul 18, 01:55 UTC · Jul 18, 2017Vulnerability1

30

Webinar: How to Stop Python Supply Chain Attacks—and the Expert Tools You Need

The Hacker NewsAug 7, 15:33 UTC · Aug 7, 2025Vulnerability

55

Necro Python bot adds new exploits and Tezos mining to its bag of tricks

Cisco TalosJun 3, 12:00 UTC · Jun 3, 2021Vulnerability CVE-2021-3129 CVE-2020-14882 CVE-2017-0144

47

Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan

Cisco TalosOct 25, 12:01 UTC · Oct 25, 2023Vulnerability

30

Dynamic Data Resolver (DDR) — IDA Plugin 1.0 beta

Cisco TalosMay 28, 14:59 UTC · May 28, 2020Vulnerability

30

Python team fixes bug that allowed takeover of PyPI repository

The RecordDec 14, 00:00 UTC · Dec 14, 2022Vulnerability1

55

A 15-Year-Old Unpatched Python bug potentially impacts +350K projects

Security AffairsSep 22, 13:28 UTC · Sep 22, 2022Vulnerability CVE-2007-4559 CVE-2001-12671

60

Two more malicious Python packages in the PyPI

Kaspersky SecurelistAug 16, 12:13 UTC · Aug 16, 2022Vulnerability1

30

Unpatched Python and Java Flaws Let Hackers Bypass Firewall Using FTP Injection

The Hacker NewsFeb 21, 17:45 UTC · Feb 21, 2017Vulnerability1

55

Legacy Python Bootstrap Scripts Create Domain

The Hacker NewsDec 1, 04:21 UTC · Dec 1, 2025Vulnerability CVE-2023-453111

47

Necro Python bot now enhanced with new VMWare, server exploits

Security AffairsJun 4, 18:17 UTC · Jun 4, 2021Vulnerability CVE-2017-0144 CVE-2017-0147

35

Code hosting service GitHub can now scan also for vulnerable Python code

Security AffairsJul 16, 13:40 UTC · Jul 16, 2018Vulnerability1

30

The State of Trusted Open Source Report

The Hacker NewsApr 2, 11:30 UTC · Apr 2, 2026Vulnerability

30

GitHub adds Python support for security alerts

Help Net SecurityDec 15, 12:29 UTC · Dec 15, 2023Vulnerability

55

PyTorch compromised to demonstrate dependency confusion attack on Python environments

Security AffairsJan 2, 18:57 UTC · Jan 2, 2023Vulnerability1

42

Python Foundation rejects US government grant earmarked for security improvements

Help Net SecurityOct 29, 00:00 UTC · Oct 29, 2025Vulnerability

30

Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox

The Hacker NewsMay 21, 10:22 UTC · May 21, 2024Vulnerability CVE-2024-34359 CVE-2024-43671

60

Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2024Vulnerability1

42

Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform

The Hacker NewsAug 3, 03:47 UTC · Aug 3, 2024Vulnerability1

42

Python URL parsing function flaw can enable command execution

Security AffairsAug 12, 16:40 UTC · Aug 12, 2023Vulnerability CVE-2023-243291

47

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

The Hacker NewsMar 24, 13:40 UTC · Mar 24, 2023Vulnerability1

42

Warning: PyPI Feature Executes Code Automatically After Python Package Download

The Hacker NewsSep 11, 04:06 UTC · Sep 11, 2022Vulnerability1

42

Code Execution Bug Affects Yamale Python Package — Used by Over 200 Projects

The Hacker NewsOct 7, 11:50 UTC · Oct 7, 2021Vulnerability CVE-2021-38305

47

Severe bug in LibreOffice and OpenOffice suites allows remote code execution

Security AffairsFeb 5, 15:14 UTC · Feb 5, 2019Vulnerability CVE-2018-16858

47

Python packages caught attempting to steal Discord tokens, credit card numbers

The RecordDec 14, 00:00 UTC · Dec 14, 2022Vulnerability

42

Two Additional Malicious Python Libraries Found on PyPI Repository

Infosecurity MagazineAug 16, 17:30 UTC · Aug 16, 2022Vulnerability1

55

New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Vulnerability CVE-2025-68668 CVE-2025-686131

60

A nasty Python package continues a trend of targeting developers

The RecordNov 8, 01:24 UTC · Nov 8, 2023Vulnerability1

30

Malicious Python packages caught stealing Discord tokens, installing shells

The RecordDec 19, 00:00 UTC · Dec 19, 2022Vulnerability1

30

15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects

The Hacker NewsSep 23, 04:29 UTC · Sep 23, 2022Vulnerability CVE-2007-4559 CVE-2022-303331

47

Python tarfile vulnerability affects 350,000 open-source projects (CVE-2007-4559)

Help Net SecuritySep 22, 00:00 UTC · Sep 22, 2022Vulnerability CVE-2007-4559

60

Talos tools of the trade

Cisco TalosDec 17, 14:02 UTC · Dec 17, 2020Vulnerability

30

Threat Stack Application Security Monitoring now supported by Python

Help Net SecurityNov 1, 00:00 UTC · Nov 1, 2019Vulnerability1

30

PyPI hardens package security with new upload restrictions

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2026Vulnerability

30

PurpleBravo’s Targeting of the IT Software Supply Chain

Recorded FutureJul 22, 00:00 UTC · Jul 22, 2026Vulnerability

42

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability CVE-2026-0300

60

The State of Trusted Open Source

The Hacker NewsJan 8, 11:50 UTC · Jan 8, 2026Vulnerability

55

PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack

The Hacker NewsJan 24, 05:24 UTC · Jan 24, 2025Vulnerability

42

New Python URL Parsing Flaw Could Enable Command Execution Attacks

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2023Vulnerability CVE-2023-243291

47