ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

Panther is the third cybersecurity startup that the company has acquired since the start of the year. Databricks previously ...

A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is ...

OpenAI is acquiring Ona, formerly known as Gitpod, a startup that lets AI agents run in cloud-based sandboxes rather than on ...

Cybersecurity roundup: supply chain threats, AI agent risks, browser-cloning malware, mule networks, endpoint bypasses, and ...

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...

GB RAM laptops can get stuck with modern multitasking, heavy workflows, and everyday software demands. We have curated the ...

There's another likely North Korean-linked scam hitting developers and their employers, while snarfing up credentials and ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...

Agentic AI security dominated Infosecurity Europe 2026 as Toronto researchers proved a free open-weight AI worm can ...