Researchers have discovered 11 new malicious open-source packages using various advanced techniques to avoid detection on the popular PyPl repository. Python’s official third-party software repository is home to over half a million developers, who typically use pre-built open-source packages to accelerate time-to-market. However, threat actors are increasingly infiltrating these upstream sources for their own ends. The JFrog Security research team yesterday revealed it had discovered 11 new malware packages with over 40,000 downloads from PyPl. Their authors…

There’s a “shockingly high” disconnect between awareness of best practices following a data breach and actions taken, according to a new study from the Identity Theft Resource Center (ITRC). The non-profit polled over 1000 US consumers to gauge their understanding of and response to breach incidents involving personal information. The report found that more than half (55%) of social media users have had their accounts compromised in the past, so there’s generally a high level of awareness about…