This week's ThreatsDay Bulletin covers the $6.43B crypto heist, Volt Typhoon, ChatGPT flaws, AI extension backdoors, spyware, critical CVEs, and more.

Static analysis of a PDF email attachment using pdfid and pdf-parser to identify JavaScript, inspect OpenAction entries, and ...

DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A script associated with performance monitoring contains code to access trading sessions, sell positions, and redirect assets ...

Dependabot alerts can add up faster than a team can work through them. A vulnerable package in your dependency tree doesn’t always mean your code uses the vulnerable part of it, so knowing whether it ...

"Just have the AI organize my files." If you open a folder with that intention, and instructions written by someone else have ...

Hackers infected 953 Magento stores with stealthy JavaScript skimmers that evade security scanners by distinguishing real shoppers from bots.

Details of CVE-2026-109618 and CVE-2026-109619 leak ahead of official update as analysts warn vulnerabilities should be taken ...

Google Chrome security update fixes 37 vulnerabilities, including critical flaws, as CERT-In urges desktop users to take the security warning seriously.

REA, short for Reverse Engineer Anything, connects AI coding agents such as Claude Code and Cursor to tools that inspect software without its source code.

ClickFix attacks, which trick people into running malicious commands themselves, continue to evolve. This latest campaign uses fake Google and Cloudflare verification pages to convince victims to ...