Malicious PyPI package set-utils steals Ethereum private keys, exfiltrating them via Polygon RPC to evade detection.

A malicious Python Package Index (PyPI) package named "set-utils" has been stealing Ethereum private keys through intercepted wallet creation functions and exfiltrating them via the Polygon blockchain ...

SilentCryptoMiner infects 2,000 users by posing as a restriction bypass tool, leveraging YouTube and Telegram for distribution.

Hugging Face's new FastRTC library enables Python developers to build real-time voice and video AI applications in just a few lines of code.

Cybercriminals are sending bogus copyright claims to YouTubers to coerce them into promoting malware and cryptocurrency ...

A newly discovered phishing campaign is using social engineering to dupe victims into copying, pasting and running the Havoc ...

Security flaws in commercial and open source supply chains are epidemic as hackers target software supply chains, ...

Fortinet identifies thousands of malicious software packages exploiting open-source repositories - SiliconANGLE ...

Havoc is a post-exploitation framework designed for advanced red teaming and adversary simulation, providing modular ...

As huge fans of Mr Robot, we had to ask whether Offensive Security was involved in the depictions of Kali in the show.

The Sophistication of Software Supply Chain Attacks Jumped in 2024, Impacting Both Software Publishers and End-User OrganizationsCAMBRIDGE, ...