Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...

CI/CD pipelines are optimized for code deployments. Long-running operational processes and self-service workflows can be ...

Anthropic's Mythos Preview was highly effective at finding vulnerability candidates, especially when analyzing source code.

Google has announced the Google Colab CLI, a command-line tool that allows developers and AI agents to interact with remote ...

A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter ...

Microsoft released MAI-Code, a model designed to convert plain-English descriptions into functional application code, pushing ...

Claude Code is most useful in my home lab when I give it boring chores.

A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is ...

TL;DR Introduction At the start of this year, I wrote a blog on how 2025 was the ‘year of the infostealer’, and it doesn’t ...

A China-linked espionage group lived inside corporate cloud accounts for a year and a half by stealing trust instead of ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...