Enhance security in the Python ecosystem with Project Quarantine. Learn how PyPI's new feature mitigates risks from malicious packages.
Python
Discover the latest security vulnerability, CVE-2024-12987, affecting popular DrayTek gateway devices. Learn how it enables remote command execution and puts over 66,000 devices at risk.
Unlocking the power of large language models (LLMs) in offensive cybersecurity. Learn how researchers achieved a record-breaking 95% performance on InterCode-CTF benchmark using simple agent designs.
Explore the details of the $308 million Bitcoin theft by the TraderTraitor threat group. Learn about their social engineering techniques and aliases.
Find out how the NodeStealer infostealer malware has evolved, expanding its capabilities and targeting Facebook Ads Manager accounts.
Learn about the high-severity vulnerability (CVE-2024-12254) in CPython that could lead to memory exhaustion in Python applications.
Find out how the NodeStealer infostealer has evolved to target Facebook Ads Manager and collect crucial financial information using Facebook’s Graph API.
Uncover the alarming details of the PyPI crypto library attack. Find out how private keys were exfiltrated by a malicious update.
Stay informed about the critical security vulnerability CVE-2024-42479 in llama_cpp_python and how it can impact your system's cybersecurity.
Ensure the security of your Django web applications. Get the latest security updates and patch critical vulnerabilities (CVE-2024-42005).
Python programming language achieves new milestone in TIOBE index, surpassing 18% popularity for the first time.
Learn about the TRACTOR program, a DARPA initiative to transition to memory-safe programming languages and automate the conversion of C code to Rust
Beware of Python Package Index malware! Learn about the recently discovered malicious packages that can steal sensitive information from your system.
CybrX, who reported the CVE-2024-6345 vulnerability, has published a detailed technical analysis and proof-of-concept exploit code
CVE-2024-34359 allow attackers to execute arbitrary code on systems using the library, leading to data breaches and system compromise
In the latest wave of tech-sector layoffs, Google has made significant cuts to teams working on key development tools like Flutter, Python
Sources within Google reveal that the company recently laid off its dedicated Python maintenance team.
where cyber threats continually evolve, the rise of scripted ransomware marks a new era of digital extortion
CVE-2023-47248 in PyArrow, the Python bindings for Apache Arrow, could allow attackers to execute arbitrary code on vulnerable systems
This vulnerability, CVE-2023-40217, allows an attacker to bypass the TLS handshake and inject malicious data into a secure connection.