Install
Vulnerabilities and Hacks
Vulnerabilities and Hacks in Python: the news, the names and what changed.
- 12 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in Vulnerabilities and Hacks
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
11+ hour, 47+ min ago (483+ words) A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro....
Stop Trusting ls -l: Linux Skill for SOC Analysts and Bug Hunters
15+ hour, 9+ min ago (251+ words) Learn how Linux permissions, ACLs, SUID, SGID, capabilities, and file attributes reveal real access paths in SOC investigations and bug hunting. Stop Trusting ls -l: Linux Skill for SOC Analysts and Bug Hunters A practical guide to decides who may touch…...
How to Detect Unknown Processes in Windows Before They Become a Security Risk
3+ day, 18+ hour ago (77+ words) Have you ever opened Windows Task Manager and noticed a process you don't recognize? A strange... Tagged with windows, monitoring, malware, cybersecurity. Have you ever opened Windows Task Manager and noticed a process you don't recognize? Templates let you quickly…...
When Your Security Tool Says "LOOKS SAFE" (TxnLense, Part 2)
2+ day, 5+ hour ago (748+ words) Part 1 ended on the first transaction I ever ran through TxnLense end to end: an unlimited ERC-20 approval, the single most-cited pattern behind wallet-draining attacks, and the exact scenario the extension exists to catch. It decoded correctly. Function name, spender,…...
The Hotfix Pipeline Trap: How Emergency Fixes Became Your Release Strategy
2+ day, 11+ hour ago (437+ words) I used to be proud of our hotfix pipeline. We could push a fix to production in under ten minutes. No meetings. No approvals. Just a branch, a quick review, and a deploy. It felt like a superpower. We were…...
Your RAG Pipeline Is Leaking Personal Data. Here’s How We Stopped It with Presidio
2+ day, 12+ hour ago (165+ words) Reversible PII masking in front of every LLM call: architecture, code, and a spaCy benchmark where the smallest … Your RAG Pipeline Is Leaking Personal Data. Here’s How We Stopped It with Presidio Reversible PII masking in front of every LLM…...
Reverse Engineering CapCut's Encrypted Video Cache (BDVE Type 1) and Building an Open-Source Solver
2+ day, 20+ hour ago (317+ words) If you've ever inspected the local draft directory of CapCut or JianYing (ByteDance's video editors), you might have noticed video cache files taking up hundreds of megabytes in folders like Resources/combination or Resources/videoAlg. Naturally, you might try opening…...
I Traced CrewAI's Sandbox CVE: 9 Names Missed the Runtime
2+ day, 21+ hour ago (359+ words) A CVE published yesterday afternoon says the Python sandbox in CrewAI, a widely used agent framework, blocked nine module names and still lost. The record's wording is blunt for a CVE: the blocklist "operates at the wrong level of abstraction....
Let’s Defend Lab #01 | Investigating a SQL Injection Attack
2+ day, 18+ hour ago (1270+ words) Gostaria de ler em Português? Clique aqui One of the most important skills for a SOC analyst is not simply identifying whether an alert looks malicious. It is understanding what happened, why it happened, which evidence supports the conclusion, and…...
I Traced AgentCore's Package Injection Bug Through 2 Fixes
2+ day, 22+ hour ago (502+ words) I was updating my agent sandbox audit scripts over the weekend and stumbled into something that changed how I look at every SDK helper that shells out. AWS's Bedrock AgentCore Python SDK, the thing you use to run code in…...