AI-powered Villager tool reached 11,000 PyPI downloads since July 2025, enabling scalable cyberattacks and complicating ...

Zscaler reveals SilentSync remote access trojan hidden in two malicious PyPI Python packages, risking browser data theft and multi-OS compromise.

The foundations said in their blog post that automated CI systems, large-scale dependency scanners, and ephemeral container ...

PyPI, the default platform for Python's package management tools, is warning users of a fresh phishing campaign.

AI-native Villager, which automates Kali and DeepSeek penetration tests, has reached 11,000 PyPI downloads fueling dual-use ...

Two malicious packages with nearly 8,500 downloads in Rust's official crate repository scanned developers' systems to steal ...

Apple has published its view on the EU's Digital Market Act (DMA) legislation, outlining a series of impacts on users.

Recently, Baidu introduced its latest lightweight text recognition model, PP-OCRv5, on its official overseas account. This ...

A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...

The new AI-native framework, freely available online, could make advanced cyberattacks faster, easier, and more accessible ...

Villager is being pitched as a legitimate AI-powered pentest tool for red teams, but the platform, made by Chinese company Cyberspike, has been loaded almost 11,000 times on PyPI in two months, ...

ClickFix typically asks the victim to perform a fake CAPTCHA test. FileFix tricks the user into copying and pasting a command ...