A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.
JavaScript Explicit Resource Management lands in Safari Technology Preview 250, completing cross-browser support across V8, ...
You’ve probably heard of GitHub. If you’re anywhere near the tech world, it’s virtually impossible to avoid. It’s the undisputed king of version control for ...
A spoofed CCleaner download site is spreading a multi-stage malware that hijacks Chrome to steal credentials, cookies, and authentication tokens while recording keystrokes and screenshots.
The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.
Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...
This week’s ThreatsDay Bulletin covers malicious packages, AI agent risks, phishing chains, exposed systems, router flaws, ...
At Black Hat USA 2026, Zenity Labs today released new research demonstrating zero-click PleaseFix exploit chains across leading agentic browsers.