Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Your Python dependencies installed. Are they vulnerable? 🔐 pip-audit checks environments and requirements for known issues, and fits into CI. Run it before release. 🐍 github.com/pypa/pip-audit #PythonSecurity #浇朋友 #蓝朋友 #互关 #fo

GitHub - pypa/pip-audit: Audits Python environments, requirements files and dependency trees for...

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them - pypa/pip-audit

github.com
2
1
80
Python 依赖装好了，就一定安全吗？🔐 pip-audit 检查环境和依赖清单中的已知漏洞，还能接入 CI。发版前跑一遍。🐍 github.com/pypa/pip-audit #PythonSecurity #浇朋友 #蓝朋友 #互关 #fo

GitHub - pypa/pip-audit: Audits Python environments, requirements files and dependency trees for...

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them - pypa/pip-audit

github.com
1
31
🐍 LiteLLM 1.107.0 got poisoned with a credential stealer on PyPI and Docker, while the GitHub repo stayed squeaky clean. Because auditing source code was getting way too easy for DevOps anyway. windowsforum.com/news/litell… #CredentialTheft #Litellm #PythonSecurity #SupplyChainAttack
1
50
Researchers just exposed DEEP#DOOR, a Python backdoor that steals browser & cloud credentials via tunneling, what's the most effective way to block such batch scripts from disabling Windows security controls? #cybersecurity #infosec #pythonsecurity
1
2
205
Unauthenticated RCE in marimo (CVE-2026-39987) exploited in the wild in record time. Attackers gained root access in under 10 hours. Patch to v0.23.0 now! #marimo #PythonSecurity #RCE #InfoSec #CVE202639987 #ZeroDay securityonline.info/marimo-t…
2
4
17
997
We May Have Finally Fixed Python’s 25-Year-Old Vulnerability #PythonSecurity #PickleModule #ContextTainting #Deserialization #VulnerabilityFix iyehuda.substack.com/p/we-ma…
3
631
Python isn’t just for devs. It powers network scanning, web security, forensics & automation. Free PDF: Mastering Python for Networking & Security Access here: linkedin.com/feed/update/urn… #PythonSecurity #CyberSec #EthicalHacking #InfosecCommunity #devops #networking #security
3
42
1
238
11,079
Bandit: Open-source tool designed to find security issues in Python code - helpnetsecurity.com/2026/01/… - @eric_wade_brown #CyberSecurity #AppSec #PythonSecurity #DevSecOps #SecureCoding

Bandit: Open-source tool designed to find security issues in Python code - Help Net Security

Bandit is an open-source tool that scans Python source code for security issues that show up in everyday development. Many security teams and developers

helpnetsecurity.com
2
253
Tracking malicious code execution in Python #PythonSecurity #MaliciousCode #CodeObfuscation #StaticAnalysis #SupplyChainAttacks rushter.com/blog/python-code…

Tracking malicious code execution in Python

Why code analysis can be hard when it comes to malicious code.

rushter.com
2
782
Fake PyPI site targets Python devs, delivering malware via malicious packages in phishing campaign—comprises dev workflows and credentials. 🚨 Verify sources, monitor build environments. Full breakdown here: dailysecurityreview.com/secu… #PythonSecurity #Phishing #SupplyChain
1
2
19
A study reveals Python's ecosystem is a "labyrinth of dependencies" that propagates vulnerabilities. Over 145,000 packages are at risk, with urllib3 accounting for 41% of all exposures. #PyPI #PythonSecurity #SupplyChainAttack #Vulnerability #OpenSource securityonline.info/pypitfal…

PyPitfall: Python’s Hidden Vulnerabilities Propagate Through 145K+ Packages

A study from the New Jersey Institute of Technology has exposed a massive web of hidden vulnerabilities lurking deep within Python’s package ecosystem. Titled “PyPitfall,” the paper reveals how co…

securityonline.info
4
363
A vulnerability (CVE-2025-8194, CVSS 7.5) in Python's tarfile module allows attackers to cause infinite loops and DoS by processing maliciously crafted archives. Patch immediately! #PythonSecurity #TarfileVulnerability #DoSAttack #CVE #CybersecurityAlert securityonline.info/python-t…

Python Tarfile Vulnerability (CVE-2025-8194) Allows DoS via Malicious Archives

A newly discovered vulnerability in Python’s tarfile module, identified as CVE-2025-8194, threatens to hang applications that process malicious archive files—triggering infinite loops and potentia…

securityonline.info
2
302
🔐 Master Python with a Security Edge! Join the Codevirus Security for Python Course and level up your coding skills with real-world cybersecurity techniques. 🐍💻🔥 #Codevirus #PythonSecurity #CyberSecureDev #LearnToCode #PythonCourse
3
16
A critical flaw (CVE-2025-4517, CVSS 9.4) in Python's tarfile module allows arbitrary file reads/writes outside the extraction directory. PoC is public; update immediately! #PythonSecurity #TarfileVulnerability #PathTraversal #Cybersecurity securityonline.info/critical…

Critical Python Tarfile Flaw (CVE-2025-4517, CVSS 9.4): Arbitrary File Write, PoC Available

A newly disclosed vulnerability in Python’s tarfile module—CVE-2025-4517—has exposed a critical security risk that allows attackers to read from and write to arbitrary files outside the inte…

securityonline.info
11
26
2,209
A high-severity flaw in Google's pure-Python Protobuf backend allows unauthenticated attackers to crash applications via crafted nested messages. Update now! #PythonSecurity #Protobuf #DoSAttack #Cybersecurity #Vulnerability securityonline.info/python-p…

Python Protobuf Flaw Allows DoS Via Nested Messages

A high-severity vulnerability has been uncovered in the pure-Python backend of Google’s Protocol Buffers (protobuf), potentially allowing attackers to crash Python-based applications through deepl…

securityonline.info
1
3
293
A malicious PyPI package called solana-token aimed to steal developer source code and secrets from blockchain projects. With 761 downloads before removal, it highlights ongoing supply chain risks in crypto development. 🚨 #CryptoThreat #PythonSecurity ift.tt/56c2ONZ
2
68
🖥️New PondRAT Malware Hidden in Python Packages Targets Software Developers🖥️ thehackernews.com/2024/09/ne… #PondRAT #Malware #PythonSecurity #CyberThreat #SoftwareDevelopment #DevSecOps #CyberSecurity #MalwareAlert #OpenSourceSecurity #DataProtection
1
2
215
Use pickling wisely for a smoother Python experience! #DataSerialization #PythonSecurity
3
33
Replying to @SANSDefense @it_audit @MarkBaggett
5/ 🐍 Python Applications are a Pain 🕗 10:30 AM EST @MarkBaggett's method for painless #Python app deployment. Package and distribute Python projects with ease. Register now 👉🏽 buff.ly/3P2wWaE #PythonSecurity
1
1
1
108
Keith Kouzmanoff@emailmp1 Feb 2024
🔒 Concerns in Python's e-mail libraries! 🔍 Despite the tech evolution, smtplib, imaplib, and poplib maintain insecure defaults, leaving room for vulnerabilities. @PentagridAG exposed potential pitfalls in secure communication. ⬇️ #PythonSecurity #EmailEncryption #Security
1
1
3
194
Load more