New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...
PCPJack steals credentials via 6 Python modules exploiting 5 CVEs, enabling cloud spread and fraud-driven attacks.
The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...
A stealthy Python-based backdoor framework capable of long-term surveillance and credential theft has been identified ...
PCPJack makes innovative use of parquet files for stealthy, pre-validated target discovery as it canvasses multiple cloud ...
Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged ...
A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing ...
An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...
Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...
ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...