This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

Rogue Agent, a vulnerability in Google Cloud Dialogflow CX, allowed attackers to control agents and exfiltrate sensitive data.

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

OpenVAS helps teams find network vulnerabilities, prioritize risks, and manage security scans with an open-source assessment platform. Download openvas scanner to assess networks, discover security ...

Download Intruder vulnerability scanner to find weaknesses before attackers do, prioritize critical risks, and keep cloud, network, and web assets protected. Built for teams that need continuous ...

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

China's most prominent cybersecurity company — which the U.S. government has sanctioned, barred from American technology, and designated a Chinese military company — unveiled two AI-powered ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.

Security teams using Amazon Web Services (AWS) infrastructure now have access to a new Amazon-made platform to manage the whole lifecycle of code vulnerabilities from discovery to remediation. The ...