Researchers at Fortinet’s FortiGuard Labs discovered two malicious packages, Zebo-0.1.0 and Cometlogger-0.1, on Python’s open-source platform PyPI. The packages, designed for surveillance, data exfiltration, and unauthorized control, can grant attackers access to systems and sensitive data. Although open-source coding allows community scrutiny, experts warn of cybersecurity risks and suggest exercising caution when using third-party scripts and packages.

Hackers are using PDFs to impersonate big brands like Microsoft and PayPal in a new threat campaign
Summarize this content to a maximum of 60 words: Hackers are increasingly using PDF attachments to impersonate major brands in phishing campaigns, according to new