packages
-
NIST Standardizes Ascon Cryptographic Algorithm for IoT and Other Lightweight Devices
Encryption / IoT Security The U.S. National Institute of Standards and Technology (NIST) has announced that a family of authenticated…
Read More » -
New High-Severity Vulnerabilities Discovered in Cisco IOx and F5 BIG-IP Products
Network Security / Vulnerability F5 has warned of a high-severity flaw impacting BIG-IP appliances that could lead to denial-of-service (DoS)…
Read More » -
Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems
Jan 17, 2023Ravie LakshmananSoftware Security / Supply Chain A threat actor by the name Lolip0p has uploaded three rogue packages…
Read More » -
Malicious PyPI Packages Using Cloudflare Tunnels to Sneak Through Firewalls
Jan 09, 2023Ravie LakshmananNetwork Security / Supply Chain In yet another campaign targeting the Python Package Index (PyPI) repository, six…
Read More » -
PyTorch Machine Learning Framework Compromised with Malicious Dependency
Jan 02, 2023Ravie LakshmananSupply Chain / Machine Learning The maintainers of the PyTorch package have warned users who have installed…
Read More » -
W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names
Dec 24, 2022Ravie LakshmananSoftware Security / Supply Chain Threat actors have published yet another round of malicious packages to Python…
Read More » -
Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data
Dec 19, 2022Ravie LakshmananSoftware Security / Supply Chain Cybersecurity researchers have discovered a new malicious package on the Python Package…
Read More » -
Google Launches Largest Distributed Database of Open Source Vulnerabilities
Dec 13, 2022Ravie LakshmananOpen Source / Vulnerability Database Google on Tuesday announced the open source availability of OSV-Scanner, a scanner…
Read More » -
Malware Strains Targeting Python and JavaScript Developers Through Official Repositories
Dec 13, 2022Ravie Lakshmanan An active malware campaign is targeting the Python Package Index (PyPI) and npm repositories for Python…
Read More »