Aggregator

The widely used PyTorch Lightning framework, which automatically executes credential-stealing malware on import, has also compromised GitHub maintainer accounts. The popular PyPI package lightning — the deep learning framework used to train, deploy, and ship AI products has been compromised in an active supply chain attack. Socket’s Research Team flagged versions 2.6.2 and 2.6.3 as […]

The post Popular Python Package lightning Hacked in Supply Chain Attack appeared first on Cyber Security News.

In early 2026, email threats increased with a rise in credential phishing, QR code phishing, and CAPTCHA-gated campaigns, highlighted by Microsoft’s disruption of the Tycoon2FA phishing platform which led to a 15% volume decrease and shifts in threat actor tactics.

The post Email threat landscape: Q1 2026 trends and insights appeared first on Microsoft Security Blog.

CrowdStrike says The Com-affiliated threat groups are using voice phishing and fake SSO pages to break into SaaS environments and steal data fast for extortion.

The post Two new extortion crews are speedrunning the Scattered Spider playbook appeared first on CyberScoop.

In early 2026, email threats increased with a rise in credential phishing, QR code phishing, and CAPTCHA-gated campaigns, highlighted by Microsoft’s disruption of the Tycoon2FA phishing platform which led to a 15% volume decrease and shifts in threat actor tactics.

The post Email threat landscape: Q1 2026 trends and insights appeared first on Microsoft Security Blog.

You must login to view this content