This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

The hack allegedly confirms the suspicions of record labels and artists that their music is used in the creation of AI music.

OpenAI has built an LLM super-hacker called GPT-Red that it uses as a sparring partner to help its other models boost their ...

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

Researchers at the Alan Turing Institute in London have documented a way to get GitHub Copilot to generate harmful content with a 100% success rate — by never asking for it directly. The technique, ...

Ethereum gossipsub vulnerability CVE-2026-34219 lets any unauthenticated peer crash a validator with a single crafted PRUNE ...

We've decided to retire and archive this project - there's just no safe way to run Python within pyodide safely with reasonable latency. Instead, we're working hard on Monty which should solve the ...