Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

If you cannot complete the Archive Extraction on your Windows computer, repair the Archive file and then extract it using ...

A relatively new ransomware family is using a novel approach to hype the strength of the encryption used to scramble ...

Python has emerged as a trusted ally for cybersecurity teams thanks to its ease of use, adaptability, and wide range of libraries. From building quick prototypes to automating repetitive checks, it ...

A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate ...

ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...

OpenClaw has become one of the fastest-growing open-source AI projects in recent memory—134,000+ GitHub stars and 500 million ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

IntroductionIn February 2022, BlackBasta emerged as a successor to Conti ransomware and quickly rose to prominence. BlackBasta was operational for three years until February 2025 when their internal ...

Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.