Experts warn of an emerging credential harvester named LegionSecurity Affairs·Apr 17, 08:53 UTC · Apr 17, 2023Vulnerability42
New Python-Based "Legion" Hacking Tool Emerges on TelegramThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2023Vulnerability42
Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal DataThe Hacker News·Mar 24, 13:40 UTC · Mar 24, 2023Vulnerability142
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent ImplantsThe Hacker News·Apr 6, 06:40 UTC · Apr 6, 2026Vulnerability142
Two flaws in Apache SuperSet allow to remotely hack serversSecurity Affairs·Sep 7, 13:34 UTC · Sep 7, 2023VulnerabilityCVE-2023-39265CVE-2023-37941CVE-2023-30776+1 CVEs47
Alert: Apache Superset Vulnerabilities Expose Servers to Remote Code Execution AttacksThe Hacker News·Sep 8, 02:46 UTC · Sep 8, 2023VulnerabilityCVE-2023-39265CVE-2023-37941CVE-2023-36388+2 CVEs47
Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE AttacksThe Hacker News·Apr 27, 07:55 UTC · Apr 27, 2023VulnerabilityCVE-2023-2752447
Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing OpenThe Hacker News·Jun 4, 10:11 UTC · Jun 4, 2025Vulnerability142
Open-source CI/CD abuse detector guards against stolen credential attacksHelp Net Security·Jun 15, 00:00 UTC · Jun 15, 2026Vulnerability42
Open-source attacks move through normal development workflowsHelp Net Security·Apr 23, 13:29 UTC · Apr 23, 2026Vulnerability142
Container Escape to Shadow Admin: GKE Autopilot VulnerabilitiesPalo Alto Unit 42·Jun 5, 23:26 UTC · Jun 5, 2024VulnerabilityCVE-2020-855447
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesThe Hacker News·May 1, 07:21 UTC · May 1, 2026VulnerabilityCVE-2019-0708147
Thousands of publicly-exposed Apache Superset installs exposed to RCE attacksSecurity Affairs·Apr 26, 13:34 UTC · Apr 26, 2023VulnerabilityCVE-2023-2752447
North Korea-Linked Hackers Target Developers via Malicious VS Code ProjectsThe Hacker News·Feb 26, 10:15 UTC · Feb 26, 2026Vulnerability42
Shell No! Adversary Web Shell Trends and Mitigations (Part 1)Recorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability42
ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0The Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026VulnerabilityCVE-2026-2084147