Skip to content
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Ravie LakshmananSep 23, 2026Malware / Cloud Security Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit… 

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

Swati KhandelwalSep 23, 2026Vulnerability / Web Security A flaw in cPanel’s CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take “full control of the server,” the company said on…