Sean Wright
29.3K posts

Sean Wright
@SeanWrightSec
Head of Application Security focused on all things #AppSec. Occasionally dabble in my own research. Also keen gamer and aspiring photographer.
2026 Yıllık Özeti
@SeanWrightSec hesabının Twitter yılını gör


🚨 EXCL: The full names and contact details for more than 100,000 police officers and staff have been leaked on the dark web after a hack on a national police database Ministry of Defence and Home Office officials are also affected Read below 1/



Guys, is this fucking stupid or what? A security company apparently scanned untrusted PyPI packages by installing/executing them in an environment where useful credentials were reachable? That is a credential donation service. Am I missing something here, or are we living in a fever dream?



You don't run code on people who haven't agreed to it. That norm has ended careers. Claude uploaded live malware to PyPI in a botched eval and 15 real systems ran it. It even worked around restrictions to squat a phantom dependency and breach 3 orgs. bleepingcomputer.com/news/security/…






