Search: “python”

851 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 798 Vulnerability 518 Exploit / PoC 248 Ransomware 222 Threat actor 145 Data breach 104 Industry 68 AI safety & security 65 Phishing & fraud 50 AI tools & infra 41 Tools 35 Research 31 Policy & legal 31 Model release 19

SeverityAll critical 647 high 859 medium 622 low 163 info 126

Chainguard Libraries for JavaScript provides developers with malware-free dependencies

Help Net SecuritySep 25, 00:00 UTC · Sep 25, 2025Malware

42

AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2025Vulnerability in the wild1

57

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

The Hacker NewsAug 19, 04:18 UTC · Aug 19, 2025Exploit / PoC1

57

Turning Criminal Forum Exploit Chatter Into Vulnerability Risk Analysis

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability CVE-2016-3081 CVE-2015-2419 CVE-2015-4852+1 CVEs

47

Shell No! Adversary Web Shell Trends and Mitigations (Part 1)

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

42

PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2025Malware1

42

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

The Hacker NewsJun 9, 16:37 UTC · Jun 9, 2025Malware

42

Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware

The Hacker NewsJun 2, 10:07 UTC · Jun 2, 2025Vulnerability CVE-2025-32432 CVE-2021-44228 CVE-2022-26134+1 CVEs

47

Malicious Machine Learning Model Attack Discovered on PyPI

Infosecurity MagazineMay 27, 14:00 UTC · May 27, 2025Malware

42

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

The Hacker NewsMay 20, 05:49 UTC · May 20, 2025Malware1

42

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

The Hacker NewsMay 7, 07:37 UTC · May 7, 2025Malware

42

U.S. CISA adds Langflow flaw to its Known Exploited Vulnerabilities catalog

Security AffairsMay 6, 13:00 UTC · May 6, 2025Exploit / PoC in the wildCVE-2025-3248

60

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

The Hacker NewsFeb 27, 07:04 UTC · Feb 27, 2025Malware

42

Fake GitHub projects distribute stealers in GitVenom campaign

Kaspersky SecurelistFeb 25, 06:21 UTC · Feb 25, 2025Malware

42

Lazarus Group Targets Bitdefender Researcher with LinkedIn Job Scam

Infosecurity MagazineFeb 6, 14:50 UTC · Feb 6, 2025Threat actor

57

Talos IR trends Q4 2024: Web shell usage and exploitation of public

Cisco TalosJan 30, 11:00 UTC · Jan 30, 2025Ransomware

57

Ultralytics Supply-Chain Attack

Schneier on SecurityDec 15, 00:00 UTC · Dec 15, 2024Malware

42

Russian Cyber Spies Target Organizations with Custom Malware

Infosecurity MagazineNov 22, 13:00 UTC · Nov 22, 2024Malware CVE-2024-23692

47

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

The Hacker NewsOct 2, 15:21 UTC · Oct 2, 2024Malware

42

Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms

The Hacker NewsAug 28, 03:53 UTC · Aug 28, 2024Vulnerability CVE-2024-27132 CVE-2023-48022 CVE-2023-46229+1 CVEs

47

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

The Hacker NewsAug 11, 10:01 UTC · Aug 11, 2024Malware

42

North Korea-Linked Malware Targets Developers on Windows, Linux, and macOS

The Hacker NewsAug 1, 09:30 UTC · Aug 1, 2024Malware

42

Understanding NullBulge, the New AI

Infosecurity MagazineJul 17, 15:00 UTC · Jul 17, 2024Ransomware

57

Exposing HelloXD Ransomware and x4k

Palo Alto Unit 42Jun 5, 20:37 UTC · Jun 5, 2024Ransomware

57

Popular PyPI site for developers temporarily blocks functions due to malware campaign

The RecordMar 28, 19:11 UTC · Mar 28, 2024Malware

42

New macOS Malware Targets Cracked Apps

Infosecurity MagazineJan 22, 16:30 UTC · Jan 22, 2024Malware

42

New MrAnon Stealer Malware Targeting German Users via Booking

The Hacker NewsDec 12, 09:57 UTC · Dec 12, 2023Malware

42

YoroTrooper: Researchers Warn of Kazakhstan's Stealthy Cyber Espionage Group

The Hacker NewsOct 26, 13:39 UTC · Oct 26, 2023Threat actor

57

APT trends report Q3 2023

Kaspersky SecurelistOct 17, 08:50 UTC · Oct 17, 2023Malware

42

Weekly Update 359

Troy HuntAug 5, 23:05 UTC · Aug 5, 2023Data breach

57

Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack

The Hacker NewsJun 28, 05:25 UTC · Jun 28, 2023Malware

42

PyPI enforces 2FA to prevent maintainers' account takeover

Security AffairsMay 30, 17:37 UTC · May 30, 2023Malware

42

PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

The Hacker NewsMay 23, 06:19 UTC · May 23, 2023Malware

42

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

The Hacker NewsMay 19, 12:13 UTC · May 19, 2023Malware1

42

Attackers Flood NPM Repository with Over 15,000 Spam Packages Containing Phishing Links

The Hacker NewsFeb 22, 11:17 UTC · Feb 22, 2023Phishing & fraud

42

PyTorch Machine Learning Framework Compromised with Malicious Dependency

The Hacker NewsJan 5, 05:00 UTC · Jan 5, 2023Data breach1

57

How to train your Ghidra

Kaspersky SecurelistDec 9, 13:00 UTC · Dec 9, 2022Vulnerability

42

Researchers Uncover PyPI Package Hiding Malicious Code Behind Image File

The Hacker NewsNov 10, 12:44 UTC · Nov 10, 2022Threat actor

57

Developer account body snatchers pose risks to the software supply chain

Cisco TalosOct 4, 12:51 UTC · Oct 4, 2022Exploit / PoC

57

EvilProxy phishing-as-a-service with MFA bypass emerged on the dark web

Help Net SecuritySep 6, 00:00 UTC · Sep 6, 2022Phishing & fraud

42