Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.

When Google Apps Script (GAS) or Python scripts don't work, the most time-consuming part is the time spent not knowing what ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

When writing scripts on Windows, sometimes the script crashes just by printing Japanese characters.UnicodeEncodeError: 'cp932 ...

Sentire's Threat Response Unit (TRU) has uncovered a previously undocumented device-code phishing kit, dubbed "GhostCode," ...

Python regex character classes make it easier to identify specific patterns inside strings without writing unnecessarily long regular expressions. This lesson demonstrates how \d matches digits while ...

SloppyRAT uses ClickFix to help ransomware attackers gain access, gather data, and spread across compromised networks.

IntroductionIn June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being ...

Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems.

Johann Rehberger’s Python module-shadowing attack achieves remote code execution 60-80 percent of the time against a feature ...

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, ...

A newly disclosed attack can turn a routine “summarize this page” request in xAI’s Grok web chat into a silent theft of the user’s name, coarse location, subscription tier, and the prompt history of ...