This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and ...

A coding LLM doesn't care whether you code, just whether your input has rules ...

Discover how the Rogue Agent vulnerability in Google Dialogflow CX enabled persistent AI agent compromise, data exfiltration, ...

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...

Agent observability, aka AgentOps, has emerged as a vital ecosystem of tools for keeping an eye on what AI agents and LLMs ...

An open WP-SHELLSTORM server exposed tools, logs, and target lists naming 1.4 million sites, with researchers validating ...

One compromised agent could take over every other agent in that project ...

Google released the Genkit Agents API in preview for TypeScript and Go. The open-source framework packages message history, ...

Somewhere in your organization, the answer to next quarter's hardest question already exists. It sits in a contract clause nobody indexed, a support ticket thread nobody summarized, a call transcript ...