Unfortunately you've used all of your gifts this month. Your counter will reset on the first day of next month.

This week's ThreatsDay Bulletin covers the $6.43B crypto heist, Volt Typhoon, ChatGPT flaws, AI extension backdoors, spyware, critical CVEs, and more.

Static analysis of a PDF email attachment using pdfid and pdf-parser to identify JavaScript, inspect OpenAction entries, and ...

DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...

A script associated with performance monitoring contains code to access trading sessions, sell positions, and redirect assets ...

Microsoft Edge exploit chain combines five bugs and two Windows features to bypass the browser sandbox and execute code .

"Just have the AI organize my files." If you open a folder with that intention, and instructions written by someone else have ...

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access ...

Hackers infected 953 Magento stores with stealthy JavaScript skimmers that evade security scanners by distinguishing real shoppers from bots.

Almost every part of the process changed, except the end result ...

Details of CVE-2026-109618 and CVE-2026-109619 leak ahead of official update as analysts warn vulnerabilities should be taken ...

Google Chrome security update fixes 37 vulnerabilities, including critical flaws, as CERT-In urges desktop users to take the security warning seriously.