Curated security research, vulnerabilities, advisories and tools for practitioners.

#python

Security coverage tagged python.

1.

Python Software Foundation - Python 3.11.0a3 to 3.15.0b2

vulnerability | Medium | 2026-08-06 00:00 | CVE-2026-12003 | bishopfox.com | original ↗ | #privilege-escalation | #windows | #python

2.

Shipping post-quantum cryptography to Python

blog | 2026-06-30 11:00 | blog.trailofbits.com | original ↗ | #open-source | #post-quantum-cryptography | #cryptography

3.

Build a Multi-Agent AI Code Review Pipeline

blog | 2026-06-11 08:32 | hackenproof.com | original ↗ | #ai-security | #smart-contracts | #automation

4.

From Zero Python to Building AI Agents That Hunt Bugs For You

research | 2026-06-08 13:31 | hackenproof.com | original ↗ | #ai-security | #bug-bounty | #web3

5.

Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting

blog | 2026-06-09 00:00 | about.gitlab.com | original ↗ | #supply-chain | #malware | #credential-theft

6.

How TeamPCP's Python Toolkit Survives a C2 Takedown: FIRESCALE, GitHub, and the Victim's Own Account

research | 2026-05-14 00:00 | hunt.io | original ↗ | #supply-chain | #threat-intelligence | #malware

7.

Paramiko Security Audit

research | 2026-05-04 22:00 | blog.quarkslab.com | original ↗ | #appsec | #vulnerability-research | #security-audit

8.

Python pitfalls: Turning developer mistakes into vulnerabilities

blog | 2026-02-27 10:38 | yeswehack.com | original ↗ | #rce | #vulnerability-research | #path-traversal

9.

Top 10 Python Security Vulnerabilities Developers Should Avoid

blog | 2025-10-05 00:00 | aikido.dev | original ↗ | #secure-coding | #python | #aikido

10.

Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution

vulnerability | Critical | 2025-07-25 12:00 | CVE-2023-39631 | xbow.com | original ↗ | #rce | #vulnerability-research | #python

11.

Making PyPI's test suite 81% faster

blog | 2025-05-01 13:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #pypi

12.

Sneak peek: A new ASN.1 API for Python

blog | 2025-04-18 13:00 | blog.trailofbits.com | original ↗ | #rust | #cryptography | #python

13.

Simplify Interviews with guided-capture

blog | 2025-03-26 00:00 | josephthacker.com | original ↗ | #ai-security | #open-source | #python

14.

Tracking Pyramid C2: Identifying Post-Exploitation Servers in Hunt

blog | 2025-02-12 00:00 | hunt.io | original ↗ | #python | #c2 | #post-exploitation

15.

PyPI now supports archiving projects

blog | 2025-01-30 14:00 | blog.trailofbits.com | original ↗ | #open-source | #pypi | #python

16.

Kali Linux 2024.4 Release (Python 3.12, Goodbye i386, Raspberry Pi Imager & Kali NetHunter)

blog | 2024-12-16 00:00 | kali.org | original ↗ | #python | #kali-linux | #release-notes

17.

Attestations: A new generation of signatures on PyPI

blog | 2024-11-14 14:00 | blog.trailofbits.com | original ↗ | #supply-chain | #pypi | #python

18.

White-box penetration testing: Debugging for Python vulnerabilities

blog | 2024-09-12 12:01 | yeswehack.com | original ↗ | #pentesting | #python | #docker

19.

Kali Linux 2024.3 Release (Multiple transitions)

blog | 2024-09-11 00:00 | kali.org | original ↗ | #python | #kali-linux | #release-notes

20.

Exploiting ML models with pickle file attacks: Part 2

blog | 2024-06-11 15:00 | blog.trailofbits.com | original ↗ | #supply-chain | #malware | #python

21.

Exploiting ML models with pickle file attacks: Part 1

blog | 2024-06-11 13:00 | blog.trailofbits.com | original ↗ | #deserialization | #python | #machine-learning

22.

Dojo challenge #32 winners!

vulnerability | 2024-05-17 08:23 | yeswehack.com | original ↗ | #ctf | #prototype-pollution | #python

23.

Unlocking Performance with Memoization: A Developer's Guide

blog | 2024-04-09 10:04 | hackerone.com | original ↗ | #secure-coding | #python | #performance

24.

Mastering Internationalization in Software Engineering

blog | 2024-04-04 03:10 | hackerone.com | original ↗ | #python | #javascript | #software-engineering

25.

Secure File Uploads in Flask: Filtering and Validation Techniques

incident | 2024-03-18 03:00 | hackerone.com | original ↗ | #web-security | #python | #best-practices

26.

Implementing and Auditing HTTPS in Django: Best Practices

blog | 2024-03-14 02:22 | hackerone.com | original ↗ | #web-security | #python | #tls

27.

Django Rest Framework vs. Django-Ninja: A High-Level Comparison

blog | 2024-03-01 00:41 | hackerone.com | original ↗ | #python | #api | #django

28.

Continuously fuzzing Python C extensions

blog | 2024-02-23 14:30 | blog.trailofbits.com | original ↗ | #open-source | #fuzzing | #python

29.

Neural Networks: Exploring the Basics and Building from Scratch

blog | 2024-02-22 04:43 | hackerone.com | original ↗ | #ai-security | #python | #tutorial

30.

Moving Away from requirements.txt for More Secure Python Dependencies

blog | 2024-02-08 02:08 | hackerone.com | original ↗ | #supply-chain | #dependency-management | #python