Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
Researchers studying cybersecurity have discovered a new and sophisticated phishing effort that spreads dangerous payloads ...
A worker searching for an adblocker ended up installing malware instead after threat actor KongTuke pushed a fake Chrome ...
Researchers found a LinkedIn phishing campaign delivering a remote access trojan via DLL sideloading, WinRAR SFX files, and ...
The Python-based information stealer SolyxImmortal uses legitimate APIs and libraries for stealthy data gathering and ...
Django 6.0 has arrived, offering developers cutting-edge features like a built-in tasks framework, enhanced security with ...
Officials of Ukraine's Defense Forces were targeted in a charity-themed campaign between October and December 2025 that delivered backdoor malware called PluggyApe.
The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade ...
Send a note to Doug Wintemute, Kara Coleman Fields and our other editors. We read every email. By submitting this form, you agree to allow us to collect, store, and potentially publish your provided ...