The PyPI repository is home to a number of malicious Python packages that have been found to steal sensitive data like AWS credentials and…
python
General
Ransomware attacks based on Python: the quickest attacks
Python-based ransomware was used for carrying out successful cyberattacks in record time-less than 3 hours. Sophos cited the attack as one of the fastest…
cyber breach
Python Packages Stealing Discord Tokens and Much More
Programming bundle archives have become a standard objective for store network assaults. As of late, there has been news on assailants utilizing npm repositories.…
Cybersecurity
Necro Python Malware Upgrading To Cryptominer Abilities; Cisco Talos Research
In the latest malware developments, the Necro Python malware has been found to be developing new and malicious capabilities, thereby intensifying its cyber threat.…
cyberattack
Russian Cyber Group Launches Phishing Attacks on Global Organizations
A hacking division known as APT29, linked with Russia’s Foreign Intelligence Service (SVR), has launched phishing attacks aimed at Microsoft Teams, affecting various global…
Malware
PyPI Temporarily Halts New Users and Projects Due to Malware Surge
In response to an overwhelming surge in malware activities, PyPI, the official third-party registry for open-source Python packages. It has temporarily suspended new user…
Vulnerabilities
The flaws in Amazon ECR Public Gallery
A critical security vulnerability in the Amazon ECR (Elastic Container Registry) Public Exhibition could have enabled assailants to deactivate any container image or inject…
cyberattack
Numerous Cyber Attacks Using IPFS Decentralized Network Seen
The decentralized Interplanetary Filesystem (IPFS) network is being used by a variety of phishing attempts to host malware, phishing kit infrastructure, and support other…
Vulnerabilities
Checkmk IT infrastructure monitoring software has Vulnerabilities
The Checkmk IT Infrastructure monitoring software has vulnerabilities that have been publicly revealed and could be exploited by a remote, unauthenticated attacker to completely…
RCE vulnerability
Critical “CosMiss” RCE Flaw Affecting Azure Cosmos DB
On Tuesday, Microsoft said that it has fixed a CosMiss RCE flaw that allows complete read and write access in Jupyter Notebooks for Azure…