Kaspersky’s research team discovered a supply chain attack targeting the Python Package Index (PyPI). The attack involved malicious packages posing as AI chatbot tools distributing JarkaStealer malware. Detected packages ‘gptplus’ and ‘claudeai-eng’ mimicked popular AI language models. The packages also tricked users with convincing usage examples. They were downloaded over 1700 times in over 30 countries before their removal.
Over 145,000 Industrial Control Systems Across 175 Countries Found Exposed Online
Over 145,000 online Industrial Control Systems (ICS) have been found across 175 nations, with the US containing a third, said Censys. Analysis found that 38%