PyPI malware targets AWS/dev creds, DNS hides images for stealth exfiltration, IBM flaw risks access. Hacks hit VirtualMacOSX, WestJet, WaPo. Kali Linux, vishing AI, and Denmark go open-source.