Zscaler reveals SilentSync remote access trojan hidden in two malicious PyPI Python packages, risking browser data theft and ...

A team of data thieves has doubled down by developing its CastleRAT malware in both Python and C variants. Both versions spread by tricking users into pasting malicious commands through a technique ...

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...

CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Once installed, you can start using Anaconda’s tools. You can open ‘Anaconda Navigator,’ which is like a dashboard to manage ...

Widely adopted it is. The tool is freely available on PyPI, the world’s biggest Python Package Index, and it has been ...

We’ve put together a guide that breaks down the basics, from what Python is all about to how you can actually start using it.

A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...

The new AI-native framework, freely available online, could make advanced cyberattacks faster, easier, and more accessible ...

Villager is being pitched as a legitimate AI-powered pentest tool for red teams, but the platform, made by Chinese company Cyberspike, has been loaded almost 11,000 times on PyPI in two months, ...