New PyPI Malware "Pytoileur" Steals Crypto and Evades Detection
The package posed as an API management tool and downloaded trojanized Windows binaries
Source: infosecurity-magazine.com
📰 Python Package Index News
Python Package Index News Today
Fast, Ad-Free News Updates
Stay updated with breaking news from Python Package Index. Real-time updates on events, politics, business and more.
ActiveState joins Python Software Foundation's Trusted Publishing Initiative to Enhance the Integrity of Python Packages as Part of Its Mission to Secure Open Source Supply Chains
/PRNewswire/ -- ActiveState, the leading Open Source Management platform for securing enterprise software supply chains, has joined the Python Software...
British Columbia Prnewswire Activestate Pete Garcin Activestate Inc Python Software Foundation Trusted Publisher Trusted Publisher
Source: prnewswire.com
This backdoor almost infected Linux everywhere: The XZ Utils close call
For the first time, an open-source maintainer put malware into a key Linux utility. We're still not sure who or why - but here's what you can do about it.
Source: zdnet.com
Vulnerability Recap 4/1/24: Cisco, Fortinet & Microsoft
Discover major vulnerabilities from the past week from Cisco, Fortinet, Microsoft, and more along with remediation recommendations.
Michael Heinzl Nick Galloway Cisco Catalyst Center Us Cybersecurity Infrastructure Security Agency Red Hat Rockwell Automation
Source: esecurityplanet.com
Malware Flood Causes PyPI To Temporarily Halt New Accounts
Python code repository PyPI temporarily halted new user registration for a second time in three months following a surge in malware-ridden code mimicking legitimate
White House District Of Columbia United States Malware Vectorsmihir Bagwe Mihirbagwe Infrastructure Security Agency Malware Flood Causes
Source: bankinfosecurity.com
Cyber Security Today, March 29, 2024 – PyPI repository shuts to stop malicious uploads, a plea to developers to stop creating apps with SQL vulnerabilities, and more
PyPI repository shuts to stop malicious uploads, a plea to developers to stop creating apps with SQL vulnerabilities, and more. Welcome to Cyber Security Today. It's Friday, March 29th, 2024. I'm Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com and TechNewsday.com in the U.S. I've reported before that threat actors are increasingly uploading malicious code
United States Factorytalk View David Shipley Infrastructure Security Agency Rockwell Automation Progress Software Moveit
Source: itworldcanada.com
PyPI halts new projects, users for 10 hours due to infostealer influx
Typosquatting attack installed malicious packages to harvest credentials and crypto wallet data.
Jossef Harush Kadouri Tzachi Zornshtain Mike Fiedler Yehuda Gelb Checkmarx Security Research Team Python Package Index
Source: scmagazine.com
PyPI stops signing up new users to try and block malware campaign
Once again, PyPI is facing an unimaginable barrage of attacks
Source: techradar.com
PyPI halted new users and projects while it fended off supply-chain attack
Automation is making attacks on open source code repositories harder to fight.
Source: arstechnica.com
Lazarus uploading malware to open-source PyPl software repository
Japan's Computer Security Incident Response Team (JPCERT/CC) has issued a warning to developers worldwide following the discovery of four malicious PyPI packages uploaded by the notorious North Korean hacking group, Lazarus.
Source: computing.co.uk