A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

Spread the loveWhen you’re knee-deep in API development, testing, and integration, efficiency is paramount. Every minute saved on repetitive tasks translates into more time for innovation and ...

When I’m out and about with my toddler, the average person we run into assumes I am a woman.

Spread the loveIf you’re a developer, or even just someone who tinkers with code, chances are you’ve heard of Visual Studio ...

David Chisnall discusses how the CHERI hardware architecture redefines pointer safety to solve isolation and sharing challenges. He explains how CHERI enables spatial and temporal memory safety for ...

OpenAI's two cyber defense models are now available to eligible customers on Amazon Bedrock, AWS announced on August 11, 2026, one day after OpenAI expanded its Daybreak initiative with new access ...

This week’s ThreatsDay Bulletin covers malicious packages, AI agent risks, phishing chains, exposed systems, router flaws, ...

FortiGuard exposes year-long QuickFox VPN supply chain attack deploying FDMTP implant on corporate Windows machines only.

To minimize the exposure of company data, AI agents start out with no permissions to access or share resources and must ...

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

AI models are finding thousands of zero-day flaws in minutes, forcing defenders to adopt automated, real-time virtual ...

TL;DR Sonatype Research Labs is tracking an active malicious package campaign, dubbed 'Flooding Dropper,' spreading on npm, ...