PyPI has implemented new measures to protect against domain resurrection attacks that could allow attackers to hijack accounts through expired domains linked to email addresses. By monitoring the lifecycle of these domains, PyPI can unverify email addresses that are no longer active, significantly reducing the risk of supply-chain attacks. Users are advised to add backup emails and enable two-factor authentication for added security.
Over 2 billion Gmail users are at risk following a significant database hack that exposed sensitive information. Experts advise users to enhance their security measures, including changing passwords and enabling two-factor authentication to mitigate potential threats.