Cybersecurity specialists report the detection of some critical vulnerabilities in NumPy, a library for the Python programming language with support for creating vectors and multidimensional arrays, along with a largeRead More →
Pip-audit is a tool developed in collaboration with Google for scanning Python environments and detecting possible known security flaws. According to cybersecurity experts, Pip-audit uses the PyPi JSON API forRead More →
Through a GitHub repository, cybersecurity specialist Nguyen The Duc published the proof-of-concept (PoC) exploit code to achieve a successful exploitation of the newly identified zero-day vulnerability in Ghostscript servers. AccordingRead More →
The Python Package Index (PyPI) registry removed several Python packages this week that aimed to steal users’ credit card numbers, Discord tokens, and provide code execution capabilities to threat actors.Read More →
A Sophos security report details the finding of at least 4,000 fake libraries in the PyPI repository, all uploaded by a user identified as Remind Supply Chain Risks, These librariesRead More →
The Python programming language has become one of the main tools for developers, largely thanks to its availability of open source libraries and frameworks. According to a recent survey, PythonRead More →