PyPI Users Targeted With 'Wacatac' Trojan in New Supply Chain Attack
Three packages recently uploaded to PyPI contain code designed to fetch the Wacatac trojan and information stealer as a next stage payload.
Source: securityweek.com
Page 13 - Python Package Index News Today : Breaking News, Live Updates & Top Stories | Vimarsana
Stay updated with breaking news from Python Package Index. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Top News In Python Package Index Today - Breaking & Trending Today
Supply Chain Attack Using Identical PyPI Packages, "colorslib", "httpslib", and "libhttps"
The FortiGuard Labs team discovered an attack embedded in three PyPI packages called ‘colorslib’, ‘httpslib’, and “libhttps”. Read our blog to learn more.
Source: fortinet.com
Sigstore announces the first stable release of code and certificate signing tool for Python
Sigstore is an open source project launched by Linux Foundation with the goal of providing free and stable services for all developers to easily sign, verify and protect their software projects. While code signing is a valuable tool to prevent hackers from co-opting patching systems and delivering malware, it is difficult to implement in open source projects given the complexity of key management.
Source: scmagazine.com
Fortinet : Supply Chain Attack Using Identical PyPI Packages, "colorslib", "httpslib", and "libhttps"
The FortiGuard Labs team has discovered a new 0-day attack embedded in three PyPI packages called 'colorslib', 'httpslib', and "libhttps". They were found on January 10, 2023, by... | January 14, 2023
Source: marketscreener.com
Introducing IPyIDA: A Python plugin for your reverse‑engineering toolkit
ESET Research releases IPyIDA 2.0, a Python plugin integrating IPython and Jupyter Notebook into IDA to help researchers solve reverse engineering problems.
Source: welivesecurity.com