A recently spotted supply chain attack abused an old but legitimate Python package to deliver a malicious payload. Read more on how the attacker managed to do it and how to protect yourself from it.

An investigation into what appeared at first glance to be a “standard” Python-based infostealer campaign took an interesting turn when it was discovered to culminate in the deployment of a ...

In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into ...

Before starting the brute force for OTP I checked whether there is any rate-limiting intervention or not. And there wasn't. I also checked for the OTP entering limit: I entered the OTP 15 times and ...

Two PyPI packages hid a Base64 downloader in a compressed Basque dictionary, delivering a Python RAT to ~1,000 users via updatenet.work (RouterHosting/Cloudzy). The ...

New macOS Infinity Stealer uses Nuitka Python payload and ClickFix: Infinity Stealer targets macOS via fake Cloudflare CAPTCHA, using Nuitka; first such campaign per Malwarebytes. Researchers at ...

Sophisticated Python backdoor DEEP#DOOR steals cloud credentials via tunneling. The attack chain begins with a batch script that disables Windows security controls and dynamically extracts an embedded ...

This workflow uses Fickling (by Trail of Bits) to inject arbitrary Python code into PyTorch model files. When someone loads the tampered model with torch.load(), the injected code executes ...