JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into ...

Infostealer threats are rapidly expanding beyond traditional Windows-focused campaigns, increasingly targeting macOS environments, leveraging cross-platform languages such as Python, and abusing ...

Bring back fun to hacking and coding. One of the most common vulnerabilities in a web application is misconfigured authentication, including code errors that allow unauthenticated people to query data ...

An investigation into what appeared at first glance to be a “standard” Python-based infostealer campaign took an interesting turn when it was discovered to culminate in the deployment of a ...

$ ./ApacheTomcatScanner.py -h Apache Tomcat Scanner v3.4 - by Remi GASCOU (Podalirius) usage: ApacheTomcatScanner.py [-h] [-v] [--debug] [-C] [--show-cves ...

Same functionality as securityheaders.io but as Python script. Also checks some server/version headers. Written and tested using Python 3.8. With minor modifications could be used as a library for ...

Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it came to light yesterday. The ...

PyScript lets you run Python scripts right in the browser, side by side with JavaScript, with two-way interaction between your code and the web page. Created by Anaconda and launched in April 2022, ...