Zscaler reveals SilentSync remote access trojan hidden in two malicious PyPI Python packages, risking browser data theft and multi-OS compromise.
IntroductionZscaler ThreatLabz regularly monitors for threats in the popular Python Package Index (PyPI), which contains open source libraries that are frequently used by many Python developers. In ...
New DDoS botnet ShadowV2 targets misconfigured Docker containers and offers a service model where customers launch their own attack.
A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...
FileFix phishing attack in June 2025 delivers StealC malware via Bitbucket images, bypassing detection with obfuscation.
The move reflects Microsoft’s broader strategy of diversifying its AI stack. Alongside its multibillion-dollar investment in ...
The rStar2-Agent framework boosts a 14B model to outperform a 671B giant, offering a path to state-of-the-art AI without ...
Tenable Research recently discovered that the original patch for a critical vulnerability affecting BentoML could be bypassed ...
ClickFix typically asks the victim to perform a fake CAPTCHA test. FileFix tricks the user into copying and pasting a command ...
Discover the most common and costly Docker mistakes made by developers, and learn how to avoid them for efficient, secure, and scalable containerization.