A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.

CVE-2026-41679, a critical vulnerability in Paperclip, allowed attackers to gain administrative privileges and code execution ...

Reports from Cisco Talos and CrowdStrike provide real-world insights into how AI is evolving attackers’ tradecraft and ...

Enterprise AI workspace security gets a new open-source option: Cloudflare OS is a free, self-hostable platform where AI ...

Getting a 503 maximum threads error? Follow these quick troubleshooting steps to restore access and fix server or CDN capacity problems.

Have you ever stopped to think about what actually happens when you load a game on your smartphone? We tap a screen, wait a ...

UK’s AISI says Anthropic and OpenAI models engaged in “potentially harmful activity directed at real people and organisations ...

This week’s ThreatsDay Bulletin covers malicious packages, AI agent risks, phishing chains, exposed systems, router flaws, ...

To minimize the exposure of company data, AI agents start out with no permissions to access or share resources and must ...

New Black Hat USA research demonstrates exploit chains across Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot Edge, enabling attacks ranging from silent data theft to ...