The Ultralytics AI library hack points to critical vulnerabilities in the Python ecosystem—but not where you might think. Here's what developers need to know.

CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

There are some critical takeaways from the Ultralytics AI Python library hack, but they're not the ones you might expect. Also, 10 tips for making Python faster and a look at uv—the all-in-one Python ...

The Bitcoinlib Python library was recently targeted by malicious packages posing as legitimate fixes. Learn how the attack unfolded and how to protect yourself.

Google researchers say the hackers abused a third-party tool in an attack spree designed to harvest credentials.

Attackers used stolen OAuth tokens from Drift to siphon data from Salesforce customers; Google urges credential rotation and ...