A new Shai-Hulud npm strain and a fake Jackson Maven package show how attackers abuse trusted dependencies to steal secrets ...

Software supply chain attacks are evolving as open source and AI-generated code introduce new third-party risks. Learn how visibility and shift-left security reduce exposure.

Even if you have Automatic Updates switched on, there can be delays before the new software installs. The fastest way to ...

Cybercriminals keep getting better at blending into the software you use every day. Over the past few years, we've seen phishing pages that copy banking portals, fake browser alerts that claim your ...

The text and code editing tool EmEditor was targeted in a supply chain attack that resulted in the distribution of ...

A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver ...

The first ThreatsDay Bulletin of 2026 tracks GhostAd adware, macOS malware, proxy botnets, cloud exploits, and more emerging ...

Vulnerabilities affecting wireless earbuds and headphones from major brands could have enabled attackers to listen in and ...

A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell ...

As of December 2025, there is no approved fourth federal stimulus check. Former President Donald Trump has proposed a new round of payments, but this has not been approved by Congress. Arizona has ...