Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
A critical Grist-Core flaw (CVE-2026-24002, CVSS 9.1) allows remote code execution through malicious formulas when Pyodide ...
A critical sandbox escape vulnerability in Grist-Core has been disclosed that allows remote code execution (RCE) through a ...
Hackers are hunting for vulnerable endpoints to deploy Python malware.
Here's what to look out for ...
The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade ...
Internet security watchdog Shadowserver tracks nearly 800,000 IP addresses with Telnet fingerprints amid ongoing attacks ...
Knostic found 1,862 MCP servers exposed with zero authentication. Here are five actions CISOs should take now.
The bugs have been fixed, so users should patch now, experts warn.
A malvertising campaign is using a fake ad-blocking Chrome and Edge extension named NexShield that intentionally crashes the ...
The attack consists of a NexShield malicious browser extension, a social engineering technique to crash the browser, and a ...
A malicious extension impersonating an ad blocker forces repeated browser crashes before pushing victims to run ...