DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...

OpenAI said on Thursday (March 19, 2026) it will buy Python toolmaker Astral, as the ChatGPT maker seeks to strengthen its portfolio against rival Anthropic to gain more share in the artificial ...

Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain. The attack typically begins when a victim downloads a business-themed ZIP ...

Aqua Security’s Trivy vulnerability scanner compromise is trickling down ...

A viral post about an AI chief of staff signals something bigger than productivity software. It signals a new class of worker ...

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...

JFrog reports Telnyx PyPI package was poisoned with malware by TeamPCP Malicious update delivered hidden .wav payload that ...

OpenClaw, an open-source AI agent with a red lobster logo, has sparked a nationwide craze in China in early 2026.Unlike ...

ThreatsDay Bulletin covers stealthy attack trends, evolving phishing tactics, supply chain risks, and how familiar tools are ...

Expert tips for reporting on the impact of the resource-hungry data storage facilities that power AI — from water exploitation to greenwashing to flouting environmental regulations.