Weekly ThreatsDay Bulletin: supply chain attacks, fake support lures, AI tampering, data leaks, ransomware, and exploited ...

Researchers at Google say they have uncovered the first known case of hackers using AI to develop a zero-day cyber exploit.

A criminal hacking group recently attempted to launch a widespread cyberattack that appeared to rely on artificial ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

Google has not identified which LLM was used to develop the zero-day exploit, but has confirmed that its own Gemini AI was ...

A fake repository mimicking OpenAI’s Privacy Filter on Hugging Face accumulated ~244,000 downloads before being removed. It delivered a multi-stage Rust infostealer ...

Google says crooks already have AI cooking up zero-days, and claims one nearly escaped into the wild before the company stopped it. In a report shared with The Register ahead of publication on Monday, ...

The 2FA bypass exploit stemmed from a faulty trust assumption, providing evidence of AI reasoning that can discover ...

A malicious repository on Hugging Face impersonated OpenAI’s “Privacy Filter” project and briefly reached the platform’s top trending position before removal ...

The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows ...

Why it matters: Practical Python projects combine multiple concepts and force real problem-solving, making skills stick more effectively than passive study. Where to start: Begin with simple games, ...

After the CopyFail vulnerability gave root access from any user on almost all distributions last week, this week we’ve got DirtyFrag. This chains the vulnerability in CopyFail (xfrm-ESP) and ...