Morning Overview on MSN
PyTorch Lightning versions 2.6.2 and 2.6.3 were compromised on April 30 — check your installs
On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one ...
Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...
SAS, a global leader in data and AI, today announced expansions to SAS ® Viya ® that advance the platform's agentic AI ...
4don MSN
Top open source PyPI package with over 1 million downloads each month hacked to send out malware
This was not a case of stolen credentials, but rather of vulnerability exploitation.
The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...
A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged ...
Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...
An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...
Joint solution closes the software supply chain trust gap with secure-by-default artifacts for engineering teams building ...
CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...
19d
Do not fall for this fake Windows update support site. It’s spreading a password-stealing malware
Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installer ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results