Python

Popular Python package ctx Python and PHP library were compromised and injected with a backdoor

On: May 24, 2022

Researchers report that ctx Python, one of the most popular packages of the Python programming language, would have been compromised by threat actors for the injection of a backdoor impossibleRead More →

Eight vulnerabilities in 16 URL parsing libraries written in C, JavaScript, PHP, Python and Ruby; hackers could deploy DoS and RCE attacks against thousands of web applications

On: January 11, 2022

In: Vulnerabilities

Cybersecurity specialists report the detection of at least eight critical vulnerabilities in 16 URL parsing libraries that would allow threat actors to deploy denial of service (DoS), remote code executionRead More →

Researchers find 11 malicious Python packages in the PyPI repository that can steal access tokens, passwords and create backdoors

On: November 22, 2021

In: Incidents

Security specialists from the firm JFrog report the discovery of 11 malicious Python packages in the Python Package Index (PyPI) repository, apparently designed for the theft of access tokens toRead More →

New malware can infect Windows and Linux devices; 70 different VirusTotal antvirus can’t detect it

On: September 20, 2021

In: Data Security

The Windows Subsystem for Linux (WSL) is a companion feature released by Microsoft in 2016 to run a Linux image in a near-native environment on Windows, allowing administrators to useRead More →

Critical remote code execution vulnerability in Fail2ban. Protect your servers

On: July 23, 2021

In: Vulnerabilities

Cybersecurity specialists report the detection of a critical vulnerability in Fail2ban, an application written in Python for the prevention of intrusions in a given system. According to the report, thisRead More →

IP address validation flaw also affects Python projects

On: May 3, 2021

In: Vulnerabilities

Experts report that the newly reported IP address validation vulnerability also impacts the IP address of the standard Python library. The flaw, tracked as CVE2021-29921, resides in the Python 3.xRead More →

Running Python Code, Without Python Installed on the System

On: October 8, 2020

In: Tutorials

Introduction Have you ever imagine running python code on Windows without installing python. There are always situations where during penetration testing you get into a device under test, which doesRead More →

Zero-day vulnerability in Python allows DOS attack: No patch available

On: July 7, 2020

In: Vulnerabilities

Specialists from a pentesting course company reported the finding of a vulnerability in Python, the popular programming language. According to the report, exploiting this flaw would allow the deployment ofRead More →

Python applications and projects using Urllib3 have a vulnerability that allows DoS attacks

On: March 9, 2020

In: Data Security

Members of a hacking course discovered that Urllib3, a popular Python HTTP client, could be exposed to the exploitation of a recently discovered denial of service (DoS) vulnerability. It isRead More →

These five programming languages have flaws that expose apps to attack

On: December 16, 2017

In: Incidents, Vulnerabilities

Securely-developed apps may be at risk due to security issues in popular interpreted programming languages. Even software that has been built with secure development procedures may still be vulnerable toRead More →

Python

Popular Python package ctx Python and PHP library were compromised and injected with a backdoor

Eight vulnerabilities in 16 URL parsing libraries written in C, JavaScript, PHP, Python and Ruby; hackers could deploy DoS and RCE attacks against thousands of web applications

Researchers find 11 malicious Python packages in the PyPI repository that can steal access tokens, passwords and create backdoors

New malware can infect Windows and Linux devices; 70 different VirusTotal antvirus can’t detect it

Critical remote code execution vulnerability in Fail2ban. Protect your servers

IP address validation flaw also affects Python projects

Running Python Code, Without Python Installed on the System

Zero-day vulnerability in Python allows DOS attack: No patch available

Python applications and projects using Urllib3 have a vulnerability that allows DoS attacks

These five programming languages have flaws that expose apps to attack

24,649,096,027 (24.65 billion) account usernames and passwords have been leaked by cyber criminals till now in 2022

How Chinese APT hackers stole Lockheed Martin F-35 fighter plane to develop its own J-20 stealth fighter aircraft [VIDEO]

Nigeria spends more than any other African country in spying its citizens

How to Hack Bank’s Voice Recognition System – Voice Biometrics with DeepFake Voice Cloning

Step by step process of hacking ATMs using black box. ATM jackpotting

Vulenerblity in UnRAR affects Linux & Unix Servers is being actively exploited by threat actors

Fix these Windows vulnerabilities before someone exploits them

3 critical vulnerabilities in Argo CD allow complete take over of your applications and servers

3 critical vulnerabilities in 9 Cisco Router models allows complete takeover of any network

Critical Security Vulnerabilities In Netgear Business Routers Which The Netgear Team Can’t Fix. Stop Using These Routers As Soon As Possible

How to easily spoof mac address automatically and be more anonymous

How to Use Advanced Network Intelligence Toolkit for Pentesting: badKarma

Tutorial for pentesting Android apps using the free ZANTI toolkit

5 best free API security testing tools. Protecting your cloud CI/CD Pipeline

How to find zero-day vulnerabilities with Fuzz Faster U Fool (ffuf): Detailed free fuzzing tool tutorial

How to do professional vulnerability assessment on your website for free using Juice Shop?

How to do local privilege escalation attacks on Windows to brute force the local administrator account?

How to easily create deepfake videos of your family?

Best web application firewall testing tools: Find out what security solutions a target website is using. WAF hacking

How to collect only valid evidence during forensic investigation and incident response processes instead of creating images of system memory

Cuba ransomware now targeting critical infrastructure

LNK files is one of the most common way of hacking into enterprise environment

This is how they use Windows Defender antivirus to encrypt your computer with LockBit Ransomware

Alibaba Cloud Compromised to Distribute Malware via Steganography

New Very Powerful All in One Linux Malware

Cyber Security Channel

Nigeria spends more than any other African country in spying its citizens

How to Hack Bank’s Voice Recognition System – Voice Biometrics with DeepFake Voice Cloning

Step by step process of hacking ATMs using black box. ATM jackpotting