Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

Caveman token compression earns an independent JetBrains benchmark: the free Claude Code skill saves 8.5% of output tokens on real agentic tasks — not the advertised 65%, which was measured on chat.

A wailing siren, a cartoon turtle, and a generation trained to duck without asking why.