Inside of the WASP’s nest: deep dive into PyPI-hosted malware
Photo by Matheus Queiroz on Unsplash In late 2022 we decided to start monitoring PyPI, arguably the most important Python repository, as there were a number of reports on it hosting malware. PyPI took exceptional relevance amongst all repositories as, historically, it was trusted by default by many software developers. Any security breach or abuse […] more…APT43: An investigation into the North Korean group’s cybercrime operations
Introduction As recently reported by our Mandiant’s colleagues, APT43 is a threat actor believed to be associated with North Korea. APT43’s main targets include governmental institutions, research groups, think tanks, business services, and the manufacturing sector, with most victims located in the United States and South Korea. The group uses a variety of techniques and […] more…More information
- Patch Tuesday – get ready for the January 2014 Security Trifecta!
- We’re celebrating Sysadmin Day! Are you?
- Google to encrypt data “end-to-end” in effort to block NSA and other agencies
- Multi-photon approach in quantum cryptography implemented
- UK Probes Equifax Hacking
- House Releases Cybersecurity Strategies Report
- Has Microsoft “broken” millions of webcams? (And how to fix yours.)
- Stay on Track: High Tensions Often Cause Incident Response to be Derailed
- Apple patches OS X against Shellshock
- ByPassing Web Application Firewall in SQL injection (WAF bypass)