python

March 17, 2026

Iranian Hackers Use Compromised Cameras for Regional Surveillance

Iranian cyber operations are expanding, focusing on US organizations and utilizing internet-connected cameras across the Middle East for intelligence and…
Read More »
March 10, 2026

Attackers Use Malformed ZIP Archives to Evade Antivirus and EDR Tools

Cybersecurity researchers at the CERT Coordination Center (CERT/CC) have issued a warning regarding a newly disclosed evasion technique tracked as…
Read More »
March 10, 2026

Iran-Linked Hackers Target U.S. Critical Infrastructure Amid Rising Cyber Threats

Iran-linked threat actors are escalating cyber operations against U.S. and allied networks, with Seedworm recently deploying new backdoors against critical…
Read More »
March 9, 2026

Nginx UI Vulnerabilities Let Attackers Download Full System Backups

A critical security flaw has been identified in Nginx UI that permits unauthorized threat actors to download and decrypt entire…
Read More »
December 14, 2025

Kali Linux 2025.4 Released Featuring 3 New Hacking Tools and Wifipumpkin3

The latest release of Kali Linux, version 2025.4, is a significant milestone for the ethical hacking distribution, introducing major architectural…
Read More »
December 8, 2025

Encrypted Configuration and Obfuscation Techniques

In the second installment of the “Advent of Configuration Extraction” series, security researchers have unwrapped QuasarRAT, a widely-deployed .NET remote…
Read More »
December 4, 2025

New Scanner Released to Detect Exposed ReactJS and Next.js RSC Endpoints (CVE-2025-55182)

Security researchers have released a specialized scanning tool to identify vulnerable React Server Component (RSC) endpoints in modern web applications,…
Read More »
December 4, 2025

PickleScan Uncovers 0-Day Vulnerabilities Allowing Arbitrary Code Execution via Malicious PyTorch Models

JFrog Security Research has uncovered three critical zero-day vulnerabilities in PickleScan, a widely-adopted industry-standard tool for scanning machine learning models…
Read More »
December 1, 2025

APT36 Deploys Python-Based ELF Malware in Targeted Attacks on Indian Government Agencies

Pakistan-linked cyberespionage group APT36 (Transparent Tribe) has escalated its campaign against Indian government institutions with the deployment of sophisticated Python-based…
Read More »
November 29, 2025

Tomiris Hacker Group Unveils New Tools and Techniques for Global Attacks

A new wave of cyberattacks has been discovered targeting government officials and diplomats across Russia and Central Asia. The group,…
Read More »
November 24, 2025

Metasploit Releases New Exploit for Fresh FortiWeb 0-Day Vulnerabilities

Rapid7’s Metasploit team has released a new exploit module targeting critical zero-day vulnerabilities in Fortinet’s FortiWeb web application firewall, chaining…
Read More »
November 23, 2025

Hackers Use Salesforce Gainsight Breach to Access Data from More Than 200 Companies

Salesforce has disclosed a significant security incident involving unauthorized access to customer data through compromised Gainsight-published applications. The breach, detected…
Read More »
November 22, 2025

Advanced Features Bypass AI Detection and Steal Password Manager Data

The Python-based information-stealing tool Xillen Stealer has reached versions 4 and 5, significantly expanding its targeting capabilities and functionality across…
Read More »
November 6, 2025

Multiple Django Flaws Could Allow SQL Injection and Denial-of-Service Attacks

The Django development team has released critical security patches addressing two significant vulnerabilities that could expose applications to denial-of-service attacks…
Read More »
October 21, 2025

Cavalry Werewolf APT Targets Multiple Sectors Using FoalShell and StallionRAT

From May to August 2025, an advanced persistent threat group known as Cavalry Werewolf—also tracked as YoroTrooper and Silent Lynx—executed…
Read More »
October 16, 2025

North Korean Hackers Deploy BeaverTail–OtterCookie Combo for Keylogging Attacks

Researchers at Cisco Talos have uncovered a sophisticated campaign by the Famous Chollima subgroup of Lazarus, wherein attackers deploy blended…
Read More »
October 12, 2025

Threat Actors Exploit Discord Webhooks for C2 via npm, PyPI, and Ruby Packages – GBHackers Security

Threat actors are increasingly abusing Discord webhooks as covert command-and-control (C2) channels inside open-source packages, enabling stealthy exfiltration of secrets,…
Read More »
October 12, 2025

LLM-Powered MalTerminal Malware Uses OpenAI GPT-4 to Create Ransomware Code

LLM-enabled malware poses new challenges for detection and threat hunting as malicious logic can be generated at runtime rather than…
Read More »
October 12, 2025

175 Malicious npm Packages Targeting Tech and Energy Firms, 26,000 Downloads

Socket’s Threat Research Team has uncovered a sprawling phishing campaign—dubbed “Beamglea”—leveraging 175 malicious npm packages that have amassed over 26,000…
Read More »
October 11, 2025

SonicWall SSL VPN Devices Targeted by Threat Actors to Distribute Akira Ransomware

A significant uptick in Akira ransomware attacks has been observed exploiting unpatched SonicWall SSL VPN devices between July and August…
Read More »

Previous page Next page