Search: “Python”

518 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 798 Vulnerability 518 Exploit / PoC 248 Ransomware 222 Threat actor 145 Data breach 104 Industry 68 AI safety & security 65 Phishing & fraud 48 AI tools & infra 41 Tools 35 Policy & legal 31 Research 31 Model release 19

SeverityAll critical 647 high 857 medium 622 low 163 info 126

CPython: [CVE-2026-87910] tarfile hardlink fallback ignores custom extraction filter rejection via None

CPython CVE-2026-87910: tarfile's hardlink fallback ignores custom extraction filters that reject entries via None, rated MEDIUM severity.

Petr Viktorin disclosed CVE-2026-87910 on the CPython security-announce list, rated MEDIUM severity. The flaw is in the tarfile module: when a custom extraction filter rejects an entry by returning None, the hardlink fallback path ignores the rejection. The posted excerpt did not include affected versions or patch details.

oss-securitySep 11, 19:20 UTC · 4d agoVulnerability CVE-2026-879101

38

Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

The Hacker NewsAug 3, 06:40 UTC · Aug 3, 2026Vulnerability CVE-2026-44827 CVE-2026-45804 CVE-2026-445131

60

Debian 13.6 security update patches over a hundred advisories in trixie

Help Net SecurityJul 13, 00:00 UTC · Jul 13, 2026Vulnerability1

30

Cybersecurity jobs available right now: April 8, 2026

Help Net SecurityJul 10, 08:06 UTC · Jul 10, 2026Vulnerability

30

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

The Hacker NewsJun 30, 15:47 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-33017 CVE-2025-32481

60

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply

The Hacker NewsJun 24, 12:48 UTC · Jun 24, 2026Vulnerability

55

Supply chain attack hits widely-used AI package, risks impacting thousands of companies

The RecordJun 18, 00:00 UTC · Jun 18, 2026Vulnerability

42

Open-source CI/CD abuse detector guards against stolen credential attacks

Help Net SecurityJun 15, 00:00 UTC · Jun 15, 2026Vulnerability

42

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

The Hacker NewsMay 3, 06:13 UTC · May 3, 2026Vulnerability CVE-2026-31431 CVE-2022-0847

47

Open-source attacks move through normal development workflows

Help Net SecurityApr 23, 13:29 UTC · Apr 23, 2026Vulnerability1

42

OpenAI updates Agents SDK, adds sandbox for safer code execution

Help Net SecurityApr 16, 00:00 UTC · Apr 16, 2026Vulnerability

30

CVE-2026-39987: Marimo RCE exploited in hours after disclosure

Security AffairsApr 11, 09:44 UTC · Apr 11, 2026Vulnerability in the wildCVE-2026-39987 CVE-2026-33017

60

North Korea-Linked Hackers Target Developers via Malicious VS Code Projects

The Hacker NewsFeb 26, 10:15 UTC · Feb 26, 2026Vulnerability

42

CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products

Security AffairsFeb 23, 12:09 UTC · Feb 23, 2026Vulnerability in the wildCVE-2026-1731

60

Cybersecurity jobs available right now in the USA: February 20, 2025

Help Net SecurityJan 30, 10:42 UTC · Jan 30, 2026Vulnerability

30

Hottest cybersecurity open-source tools of the month: January 2026

Help Net SecurityJan 29, 00:00 UTC · Jan 29, 2026Vulnerability

30

Pyodide Sandbox Escape Enables Remote Code Execution in Grist

Infosecurity MagazineJan 27, 16:45 UTC · Jan 27, 2026Vulnerability

55

Week in review: Fully patched FortiGate firewalls are getting compromised, attackers probe Cisco RCE flaw

Help Net SecurityJan 25, 00:00 UTC · Jan 25, 2026Vulnerability CVE-2026-20045 CVE-2025-59718

60

Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution

The Hacker NewsJan 20, 13:55 UTC · Jan 20, 2026Vulnerability CVE-2025-68143 CVE-2025-68144 CVE-2025-681451

47

ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More Stories

The Hacker NewsJan 19, 06:25 UTC · Jan 19, 2026Vulnerability CVE-2025-62507 CVE-2025-23304 CVE-2026-225841

60

China-linked APT UAT-9686 abused now patched maximum severity AsyncOS bug

Security AffairsJan 16, 10:17 UTC · Jan 16, 2026Vulnerability in the wildCVE-2025-20393

60

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

How to Integrate AI into Modern SOC Workflows

The Hacker NewsDec 30, 09:30 UTC · Dec 30, 2025Vulnerability

30

Critical PickleScan Vulnerabilities Expose AI Model Supply Chains

Infosecurity MagazineDec 2, 16:00 UTC · Dec 2, 2025Vulnerability CVE-2025-10155 CVE-2025-10156 CVE-2025-10157

60

Cybersecurity jobs available right now: July 22, 2025

Help Net SecuritySep 26, 11:08 UTC · Sep 26, 2025Vulnerability

55

ReVault! When your SoC turns against you… deep dive edition

Cisco TalosAug 9, 13:00 UTC · Aug 9, 2025Vulnerability

30

Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval

The Hacker NewsAug 5, 13:04 UTC · Aug 5, 2025Vulnerability CVE-2025-541361

60

Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open

The Hacker NewsJul 23, 09:28 UTC · Jul 23, 2025Vulnerability

42

Behind the code: How developers work in 2025

Help Net SecurityJul 11, 00:00 UTC · Jul 11, 2025Vulnerability1

30

Cybercriminal abuse of large language models

Cisco TalosJun 25, 10:00 UTC · Jun 25, 2025Vulnerability

42

Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new tools

Help Net SecurityJun 14, 00:00 UTC · Jun 14, 2025Vulnerability

30

Scarcity signals: Are rare activities red flags?

Cisco TalosMay 23, 10:00 UTC · May 23, 2025Vulnerability

30

Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2025Vulnerability

42

Gemini hackers can deliver more potent attacks with a helping hand from… Gemini

Ars Technica · SecurityMar 28, 11:00 UTC · Mar 28, 2025Vulnerability

30

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

The Hacker NewsMar 18, 04:03 UTC · Mar 18, 2025Vulnerability CVE-2025-30066 CVE-2023-492911

60

Debunking 5 myths about network automation

Help Net SecurityFeb 27, 00:00 UTC · Feb 27, 2025Vulnerability

55

PlushDaemon APT Targeted South Korean VPN Software

Infosecurity MagazineJan 22, 17:01 UTC · Jan 22, 2025Vulnerability

55

North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin

The Hacker NewsDec 27, 06:13 UTC · Dec 27, 2024Vulnerability

42

Russia-linked APT TAG-110 uses targets Europe and Asia

Security AffairsNov 25, 09:52 UTC · Nov 25, 2024Vulnerability

42

Decades-Old Security Vulnerabilities Found in Ubuntu's Needrestart Package

The Hacker NewsNov 20, 10:24 UTC · Nov 20, 2024Vulnerability CVE-2024-48990 CVE-2024-48991 CVE-2024-48992+2 CVEs

35