Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...
SecurityWeek

Armored Likho APT Targeting Government, Electric Power Entities

The Armored Likho APT is targeting government and electric power organizations with modular RATs and information stealers.
CSOonline

Google’s Vertex AI SDK could allow RCE through bucket squatting

Google reportedly patched a flaw in the Vertex AI SDK for Python that could allow attackers to hijack model uploads and trigger remote code execution across tenants. A design flaw in the Vertex AI ...