Researchers at Fortinet’s FortiGuard Labs discovered two malicious packages, Zebo-0.1.0 and Cometlogger-0.1, on Python’s open-source platform PyPI. The packages, designed for surveillance, data exfiltration, and unauthorized control, can grant attackers access to systems and sensitive data. Although open-source coding allows community scrutiny, experts warn of cybersecurity risks and suggest exercising caution when using third-party scripts and packages.

Microsoft Report Warns of AI-Powered Automation in Cyberattacks and Malware Creation
Cybercriminals are weaponizing artificial intelligence to accelerate malware development, discover vulnerabilities faster, and create more sophisticated phishing campaigns, according to Microsoft’s latest Digital Defense Report