📰 GraalVM CE 25.1.3 Gets Native Image "Hello World" Program Down To <em>Just</em> 6.5MB

GraalVM, the advanced JDK focused on ahead-of-time (AOT) Native Image compilation and since last year began shifting focus to more non-Java languages like Python and JavaScript, is out with its newest community feature release. GraalVM Community Edition 25.1.3 is now available with some interesting changes in tow...

🔗 Source: https://www.phoronix.com/news/GraalVM-Community-25.1.3

#python

📰 New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs.Run one, and it quietly lifts your saved passwords, browser cookies, and files, then hands the attacker a shell on your machine. YesWeHack and.

🔗 Source: https://thehackernews.com/2026/07/new-chocopoc-rat-targets-vulnerability.html

#python

📰 Home Assistant quietly rewrote its Matter server from Python to TypeScript — here's what changed

The biggest Matter upgrade in years doesn't add a single feature.

🔗 Source: https://www.xda-developers.com/home-assistant-quietly-rewrote-its-matter-server-from-python-to-typescript-heres-what-changed/

#python

📰 Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent.The researchers said the public agent could be prompt-injected into posting /adk-issue-fix as adk-bot. They identified the bot as a collaborator, so that comment satisfied.

🔗 Source: https://thehackernews.com/2026/08/google-deletes-3-adk-ai-workflows-after.html

#python

📰 Mojo 1.0 Programming Language Officially Released

Modular releases Mojo 1.0, delivering a stable foundation, Python-style lambdas, improved LSP support, and stronger memory-safety diagnostics.

🔗 Source: https://linuxiac.com/mojo-1-0-programming-language-officially-released/

#python

📰 CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.Ray is an open-source, Python-native distributed computing framework designed to scale artificial intelligence and machine learning workloads. As of writing, the GitHub project has more than.

🔗 Source: https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html

#opensource #python

📰 Postcard is a new email client for GNOME, built with AI

Postcard is a new email client for GNOME that has echoes of Geary The app is the work of a solo developer, gxanshu on GitHub, who is upfront about using AI coding tools to bring this “modern mail client” to life. Postcard is written in Python with GTK4/libadwaita. It uses imaplib and smtplib for networking, a local SQLite index for searching, WebKitGTK for rendering HTML and libsecret for keeping passwords safe.

🔗 Source: https://www.omgubuntu.co.uk/2026/08/postcard-gnome-email-client

#gnome #python

📰 Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user. CVE-2026-66066 aka.

🔗 Source: https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html

#python

📰 BleachBit 6.0.4 Cleaner and Privacy Tool Released with Faster Scanning

BleachBit 6.0.4 is out with faster startup and scanning, new cleaners for fish, Zsh, Android Studio, Gradle, and Python, plus major security fixes.

🔗 Source: https://linuxiac.com/bleachbit-6-0-4-cleaner-and-privacy-tool-released-with-faster-scanning/

#android #python

📰 CPython eases Rust requirements as assimilation continues

By making Rust opt-in, the Python builders hope to enjoy Rust bennies without the backlash that roiled the Linux kernel keepers.

🔗 Source: https://www.theregister.com/devops/2026/09/14/cpython-eases-rust-requirements-as-assimilation-continues/5296010

#kernel #linux #python #rust

📰 Linux's Perf Script Command Much Faster With Overhaul As Python Module

A big patch series sent out this weekend for the Linux kernel's perf subsystem removes the embedded Python and Perl scripting in favor of standalone Python scripts with a new Python perf module. This perf module for Python written in C is much faster than the status quo...

🔗 Source: https://www.phoronix.com/news/Linux-Perf-Python-Module

#kernel #linux #python

📰 Fedora Linux 45 Beta Released with Python 3.15, GCC 16.2, and Major Security Changes

by George WhittakerThe Fedora Project has officially released Fedora Linux 45 Beta, giving users an early look at the technologies expected to form the foundation of the final Fedora 45 release. The beta became available on September 15, 2026, after Fedora's Quality team approved Release Candidate 1.3 for publication.Fedora 45 Beta brings significant changes throughout the operating system, including Python 3.15, GCC 16.2, glibc 2.

🔗 Source: https://www.linuxjournal.com/content/fedora-linux-45-beta-released-python-315-gcc-162-and-major-security-changes

#fedora #linux #python

📰 Sublime Text 4213 Code Editor Adds Python 3.14, File Icon Themes

Sublime Text 4213 updates its plugin runtime to Python 3.14, adds file icon themes, Git improvements, and several Linux-specific fixes.

🔗 Source: https://linuxiac.com/sublime-text-4213-code-editor-adds-python-3-14-file-icon-themes/

#git #linux #python

📰 Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS.According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions.

🔗 Source: https://thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html

#linux #python

📰 Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK's maintainers said in a security advisory.Affected versions sent the client secret, the authorization code, and the PKCE proof key to a token endpoint the attacker controlled. The fix is in versions 1.30.0 and.

🔗 Source: https://thehackernews.com/2026/09/official-mcp-python-sdk-flaw-can-let.html

#python

📰 Python 3.15 Released With Experimental JIT Compiler Running Faster

Python 3.15 is out today as the newest annual feature release for the Python programming language...

🔗 Source: https://www.phoronix.com/news/Python-3.15-Released

#python

📰 SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,.

🔗 Source: https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html

#python

📰 n8n saved me more time this year than any AI tool, and most of my workflows don't use AI at all

Before I started using n8n, most of my automations were Python or Bash scripts that ran through cron jobs. They got things done, although adding something new or figuring out why a script stopped working took more effort than I wanted. I only have a working knowledge of Python, and even when an AI tool helps me write the code, I still have to understand enough of it to maintain the automation. With n8n, I can follow the workflow on a canvas,...

🔗 Source: https://www.xda-developers.com/n8n-saved-more-time-year-ai-tool-workflows-dont-use-ai/

#python

📰 LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the.

🔗 Source: https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

#python

📰 Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

🔗 Source: https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html

#python