Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

Companies must be capable of detecting malicious DLLs and vulnerabilities in software libraries to prevent early-stage ...

A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...

A newly launched initiative, Patch the Planet, founded with Trail of Bits and others, aims the same tools at open-source ...

OpenAI has unveiled a major expansion of its Daybreak cybersecurity initiative, introducing new AI-powered tools, ...

The same day OpenAI announced the most significant expansion of its Daybreak cybersecurity initiative since the platform launched in May, intelligence agencies from all five nations of the Five Eyes ...

OpenAI has expanded its Daybreak cybersecurity initiative with a new suite of tools and partnerships. OpenAI on Monday expanded its Daybreak cybersecurity initiative with a new suite of tools and ...

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...