This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

President Trump’s bold vision to secure and accelerate American artificial intelligence (AI) innovation is being actioned through the creation of “GOLD ...

CISA is one of around 100 organizations approved to use Anthropic’s Mythos model, which is far better than human penetration ...

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud ...

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...

A free, structured cybersecurity roadmap for beginners, career switchers, and IT pros in 2026. Networking and OS fundamentals, hands-on labs, certifications (Security+, CySA+, OSCP+, CISSP, CCSP, and ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

Security tools are written in specific languages for reasons, not by accident. Python runs most pen-test automation. Metasploit is Ruby. Ghidra and IDA output x86 Assembly. CISA and the NSA are now ...

Developers get unrestricted access to thousands of nearly CVE-free images from the Minimus catalog of distroless, hardened ...