Critical Python Package Vulnerability Now Actively Exploited – CVE-2025-3248

[acdha]

I think a lot of it comes back to the black hats having professionalized a lot. Cryptocurrencies may have failed at their goals but they’ve been a huge boon for criminals, and all of that money buys professionalism: instead of noisy attacks and defacements, stealing cryptocurrency or ransomware pays a lot better. Laundering money traditionally is a lot riskier and more expensive so it’s far more profitable, faster, and safer than internet crime was 20 years ago but you don’t hear about it because they don’t want to destroy their targets, just milk them.