A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and ...

JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, ...

The global Java development ecosystem experienced significant structural changes this week following the introduction of a new OpenJDK enhancement draft alongside warnings from cybersecurity ...

My home server finally earned its electricity bill.

Somewhere in your organization, the answer to next quarter's hardest question already exists. It sits in a contract clause nobody indexed, a support ticket thread nobody summarized, a call transcript ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in ...

Agent observability, aka AgentOps, has emerged as a vital ecosystem of tools for keeping an eye on what AI agents and LLMs ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

AI success depends on whether enterprise data is ready, reachable, and close enough to the workloads that need it. In this ...

QR code phishing – also known as quishing – has reached record levels in ESET telemetry. ESET analyzed nearly 900,000 AI ...