Package
-
Blog
Laravel admin package Voyager vulnerable to one-click RCE flaw
Three vulnerabilities discovered in the open-source PHP package Voyager for managing Laravel applications could be used for remote code execution attacks. The issues remain unfixed and can be exploited against an authenticated Voyager user that clicks on a malicious link. Vulnerability researchers at SonarSource, a code quality and security company, say that they tried to report the flaws to the Voyager maintainers…
Read More » -
Blog
Comcast Bundles Sports and News Into a $70/mo Package
Today, Comcast announced a new subscription bundle featuring more than 50 live news, sports, and broadcast channels in exchange for a low flat monthly price. However, you need to be an Xfinity internet customer to access it. The new Sports & News TV bundle also includes 300 hours of cloud DVR storage, a Peacock subscription (8,000+ hours of live sports),…
Read More » -
Blog
Malicious PyPi package steals Discord auth tokens from devs
A malicious package named ‘pycord-self’ on the Python package index (PyPI) targets Discord developers to steal authentication tokens and plant a backdoor for remote control over the system. The package mimics the highly popular ‘discord.py-self,’ which has nearly 28 million downloads, and even offers the functionality of the legitimate project. The official package is a Python library that allows communication with Discord’s…
Read More » -
Blog
Malicious PyPI package with 37,000 downloads steals AWS keys
A malicious Python package named ‘fabrice’ has been present in the Python Package Index (PyPI) since 2021, stealing Amazon Web Services credentials from unsuspecting developers. According to application security company Socket, the package has been downloaded more than 37,000 times and executes platform-specific scripts for Windows and Linux. The large number of downloads is accounted by fabrice typosquatting the legitimate SSH remote server…
Read More » -
Blog
Why climate perks should factor in your employee benefits package
New research from Deloitte shows that 72% of Gen Z and 71% of millennial workers take into account an employer’s environmental impact and policies before accepting a job from them. Furthermore, 54% of Gen Z and 48% of millennials are asking their employers to take more action on climate change. They would be willing to leave their job, and even…
Read More » -
Blog
Surprisingly Big Upgrades in a Small Package
Key Takeaways The Google Pixel 9 is a fresh start for the series. It feels different, with bold design choices and top-notch performance. The design is comfortable and attractive. The camera bar provides a nice ledge for your fingers, and the phone is a good size. The AI features are improving. While imperfect, the “Pixel Screenshots” and “Call Notes” features…
Read More »