A flaw in Anthropic’s Claude Code GitHub Action allowed a malicious GitHub issue from a bot actor to trigger workflows and ...

Cisco patched a Unified CM flaw allowing unauthenticated network attackers to write files and escalate to root.

DoJ disrupted 1.4M accounts and froze $3.8M in crypto as scam losses hit $7.2B in 2025, weakening fraud networks.

TA4922 expanded targeting to organizations in the U.K., Germany, Italy, and South Africa while continuing campaigns against ...

A large-scale campaign impersonates open-source and freeware project portals to redirect users through a gated TDS and ...

June 2 AI order highlights classified deployment risks, requiring secure data, access, and networks to preserve mission trust ...

Operation FlutterBridge is a macOS malvertising campaign spreading FlutterShell, a Flutter-based backdoor with adware ...

Weekly ThreatsDay recap: old bugs, fake tools, shady payload tricks, AI mishaps, and the usual reminder that the internet is ...

Your critical systems aren't as isolated as your diagram says. Metasploit creator HD Moore on the hidden bridges that break ...

Redis CVE-2026-23479 enables authenticated RCE; affecting versions since 7.2.0, patched May 5 to reduce exploitation risk.

HTTP/2 Bomb exploits HPACK and flow control; a single client can hold 32GB memory in 20 seconds, causing server outages.

VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.