Malicious PyPI Package Exploited Deezer’s API, Orchestrates a Distributed Piracy Operation

A malicious PyPi package effectively turned its users’ systems “into an illicit network for facilitating bulk music downloads,” writes The Hacker News.

Though the package has been removed from PyPI, researchers at security platform Socket.dev say it … Continue reading Malicious PyPI Package Exploited Deezer’s API, Orchestrates a Distributed Piracy Operation

Week in review: Botnet hits M365 accounts, PoC for Ivanti Endpoint Manager vulnerabilities released

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Massive botnet hits Microsoft 365 accounts A recently discovered botnet of over 130,000 compromised devices is launching coordinated password-spraying att… Continue reading Week in review: Botnet hits M365 accounts, PoC for Ivanti Endpoint Manager vulnerabilities released