← All news

Cybersecurity

Pluto Security details how a trust_remote_code download turns into malware

The trick at the center of this campaign is not an exploit. It is a feature. Pluto Security’s analysis of a cryptominer operation on the Hugging Face Hub shows that the attacker never needed to break anything. The model-loading library runs the Python that infects a machine exactly as designed.

Read the full story on The Next Web.

Read at source (opens in a new tab)

Latest from The Next Web

Latest digest

Week 43 EN

Open the digest

Sources

71 active sources

26 Turkish · 45 English

All sources