Malicious PyPI package soopsocks downloaded 2,653 times before takedown, exfiltrating Windows data to Discord.

The foundations said in their blog post that automated CI systems, large-scale dependency scanners, and ephemeral container ...

PyPI, the default platform for Python's package management tools, is warning users of a fresh phishing campaign.

A coalition of open-source stewards warns that the software industry’s reliance on goodwill to maintain critical ...

Two malicious packages with nearly 8,500 downloads in Rust's official crate repository scanned developers' systems to steal ...

North Korea’s Contagious Interview spreads AkdoorTea and TsunamiKit to steal crypto and infiltrate global developers.

Recently, Baidu introduced its latest lightweight text recognition model, PP-OCRv5, on its official overseas account. This model has only 0.07 billion parameters and achieves OCR accuracy comparable ...

Apple has published its view on the EU's Digital Market Act (DMA) legislation, outlining a series of impacts on users.

A gamer seeking financial support for cancer treatment lost $32,000 after downloading from Steam a verified game named ...

A gang of North Korean hackers behind fake IT job recruitment scams now have access to a remote access Trojan favored by ...

Discover the types of malware in 2025, from backdoors to ransomware, and learn which families hackers use most in real-world attacks.

Cofense research sees cybercriminals spoof legal firms with AI tools, spreading malware that steals crypto and may evolve ...