ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

Panther is the third cybersecurity startup that the company has acquired since the start of the year. Databricks previously ...

A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is ...

Requires Go 1.26+ (the toolchain is auto-bumped by go-proton-api master). The Go module path is github.com/millsmillsymills/protonmail-mcp. Build from a clone: git ...

OpenAI is acquiring Ona, formerly known as Gitpod, a startup that lets AI agents run in cloud-based sandboxes rather than on ...

Cybersecurity roundup: supply chain threats, AI agent risks, browser-cloning malware, mule networks, endpoint bypasses, and ...

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...

GB RAM laptops can get stuck with modern multitasking, heavy workflows, and everyday software demands. We have curated the ...

There's another likely North Korean-linked scam hitting developers and their employers, while snarfing up credentials and ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...

Microsoft has announced the Surface RTX Spark Dev Box, a new compact desktop computer designed specifically for software developers, AI engineers and researchers.