Serious vulnerability in Pillow, the standard Python image library. Risk of code execution via crafted filenames alone

IntroductionA critical vulnerability has been discovered in Pillow, the most widely used image library in Python. When ...
The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...
XDA Developers

I rebuilt my most complicated Excel workbook in Python with an AI agent's help, and I'm not going back

Excel isn't useless here, either. Poking one number and watching everything move is instant, and Excel's own Python in Excel ...
xenospectrum

Python 3.15 Makes UTF-8 the Default, Easing Windows Text Issues — but Legacy Code Needs a Check

Python 3.15's UTF-8 default reduces environment-dependent behavior when no encoding is specified. We look at what it means ...
InfoQ

ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses ...

Calling External Commands from Python: Separating Arguments, Exit Codes, and Timeouts

When automating tasks with Python, you often want to call other programs on your machine. However, there is not just one reason why this might fail. It could fail to start, crash midway, hang ...
Help Net Security

Anthropic’s new budget model gets much better at ignoring hidden commands

Anthropic launches Claude Haiku 5.5 with lower prices, faster performance, improved safety and API credits for Max and Team users.
The Hacker News

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Attackers exploit Citrix NetScaler CVE-2026-88771 to deploy web shells and attempt theft of configuration data.