Search: “PyPI”

114 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 38 Ransomware 36 Threat actor 35 Exploit / PoC 23 AI safety & security 23 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Tools 2 Research 2 AI research 1

SeverityAll critical 114 high 250 medium 76 low 13 info 10

Hackers target AI and crypto as software supply chain risks grow

Help Net SecurityDec 3, 14:29 UTC · Dec 3, 2025Vulnerability in the wild

60

Security Affairs newsletter Round 544 by Pierluigi Paganini – INTERNATIONAL EDITION

Security AffairsOct 5, 11:35 UTC · Oct 5, 2025Ransomware in the wildCVE-2025-41244

60

ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

The Hacker NewsOct 2, 12:19 UTC · Oct 2, 2025Vulnerability CVE-2025-10184 CVE-2024-364011

60

When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromise

CyberScoopSep 15, 13:21 UTC · Sep 15, 2025Exploit / PoC in the wild

60

Week in review: Microsoft fixes wormable RCE bug on Windows, check for CitrixBleed 2 exploitation

Help Net SecurityJul 13, 00:00 UTC · Jul 13, 2025Vulnerability in the wildCVE-2025-47981 CVE-2025-49719 CVE-2025-57771

60

Malicious Open Source Packages Surge 188% Annually

Infosecurity MagazineJul 8, 11:00 UTC · Jul 8, 2025Malware

55

Taking over millions of developers exploiting an Open VSX Registry flaw

Security AffairsJun 27, 19:37 UTC · Jun 27, 2025Vulnerability

55

Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks

The Hacker NewsJun 27, 05:04 UTC · Jun 27, 2025Vulnerability

55

⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

The Hacker NewsMay 19, 14:35 UTC · May 19, 2025Exploit / PoC in the wildCVE-2025-30397 CVE-2025-30400 CVE-2025-32701+22 CVEs

60

Most critical vulnerabilities aren't worth your attention

Help Net SecurityApr 28, 00:00 UTC · Apr 28, 2025Vulnerability

55

Package hallucination: LLMs may deliver malicious code to careless devs

Help Net SecurityApr 14, 00:00 UTC · Apr 14, 2025Data breach1

60

Changing the tide: Reflections on threat data from 2024

Cisco TalosFeb 6, 19:03 UTC · Feb 6, 2025Exploit / PoC in the wild

60

Taiwan Bans DeepSeek AI Over National Security Concerns, Citing Data Leakage Risks

The Hacker NewsFeb 4, 11:56 UTC · Feb 4, 2025Data breach

60

Security Affairs newsletter Round 508 by Pierluigi Paganini

Security AffairsJan 26, 14:30 UTC · Jan 26, 2025Ransomware in the wildCVE-2025-230061

60

Cryptomining Malware Found in Popular Open Source Packages

Infosecurity MagazineDec 23, 16:30 UTC · Dec 23, 2024Malware

55

Malware report for Q2 2024 — a quarterly review

Kaspersky SecurelistSep 5, 07:45 UTC · Sep 5, 2024Malware CVE-2024-3094

60

Here’s how carefully concealed backdoor in fake AWS files escaped mainstream notice

Ars Technica · SecurityJul 15, 00:00 UTC · Jul 15, 2024Malware

55

Week in review: Attackers use phishing emails to steal NTLM hashes, Patch Tuesday forecast

Help Net SecurityMar 10, 00:00 UTC · Mar 10, 2024Vulnerability in the wildCVE-2024-20337 CVE-2024-23225 CVE-2024-23296+6 CVEs

60

Securing software repositories leads to better OSS security

Help Net SecurityMar 4, 00:00 UTC · Mar 4, 2024Vulnerability

55

Phylum integrates with Sumo Logic to identify software supply chain attacks

Help Net SecurityDec 7, 00:00 UTC · Dec 7, 2023Exploit / PoC

60

CI/CD Risks: Protecting Your Software Development Pipelines

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2023Vulnerability1

55

48 Malicious npm Packages Found Deploying Reverse Shells on Developer Systems

The Hacker NewsNov 6, 16:38 UTC · Nov 6, 2023Malware1

55

Half of AI Open Source Projects Reference Buggy Packages

Infosecurity MagazineJul 20, 11:00 UTC · Jul 20, 2023Vulnerability1

55

LLMs and AI positioned to dominate the AppSec world

Help Net SecurityJul 20, 00:00 UTC · Jul 20, 2023Policy & legal

55

Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Vulnerability in the wild

60

Google delivers secure open source software packages

Help Net SecurityApr 13, 00:00 UTC · Apr 13, 2023Vulnerability

55

Advanced threat predictions for 2023

Kaspersky SecurelistNov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild

60

350K Open-Source Projects At Risk of Supply Chain Vulnerability

Infosecurity MagazineSep 21, 17:00 UTC · Sep 21, 2022Vulnerability

55

Google Launches New Open Source Bug Bounty to Tackle Supply Chain Attacks

The Hacker NewsSep 1, 03:01 UTC · Sep 1, 2022Vulnerability

55

Open source cyberattacks increasing by 650%, popular projects more vulnerable

Help Net SecuritySep 17, 00:00 UTC · Sep 17, 2021Vulnerability

55

Software Supply Chain Attacks Surge 650% in a Year

Infosecurity MagazineSep 15, 14:00 UTC · Sep 15, 2021Vulnerability

55

Google launches Open Source Vulnerabilities (OSV) database

Security AffairsFeb 8, 21:24 UTC · Feb 8, 2021Vulnerability

55

Open Source Supply Chain Attacks Surge 430%

Infosecurity MagazineAug 13, 09:53 UTC · Aug 13, 2020Exploit / PoC in the wild

60

Critical RCE flaw patched in Packagist PHP package repository

Security AffairsSep 3, 13:28 UTC · Sep 3, 2018Vulnerability

55