Companies must be capable of detecting malicious DLLs and vulnerabilities in software libraries to prevent early-stage ...

Research from JFrog into the software supply chain vulnerability points to the need for better visibility into applications, ...

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

The tool has already blocked more than 52,000 risky npm packages as supply chain attacks continue to hit software teams.

Recently, npm, the essential package manager used by developers worldwide, suffered a massive supply chain attack. This breach not only compromised numerous popular JavaScript packages but also ...

Security researcher Nightmare Eclipse has released a new Windows BitLocker bypass, only one day after publishing an exploit targeting Microsoft Defender. Named GreatXML, the fresh exploit allows users ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

An attacker exploited a DAO governance flaw to mint tokens and drain 944 WETH ($1.58 million) from a Balancer liquidity pool. By controlling just over 50% of TOP’s token supply, the attacker could ...

Microsoft has cut off access to dozens of its open source projects hosted on GitHub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code ...