Weekly cybersecurity roundup covering exploited vulnerabilities, malware campaigns, legal actions, and nation-state attacks ...

The path traversal bug allows attackers to include arbitrary filesystem content in generated PDFs when file paths are not ...

The latest flaw in Cisco Systems Identity Services Engine (ISE), which could expose sensitive information to an attacker, ...

Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

December 2025 was a brutal reality check for security teams. While most were winding down for the holidays, threat actors weaponized a tectonic shift in the landscape, headlined by the... The post Top ...

The first ThreatsDay Bulletin of 2026 tracks GhostAd adware, macOS malware, proxy botnets, cloud exploits, and more emerging ...

Bun 1.3 revolutionizes full-stack JavaScript development with unified database APIs and zero-config frontend setup.

We propose HtmlRAG, which uses HTML instead of plain text as the format of external knowledge in RAG systems. To tackle the long context brought by HTML, we propose Lossless HTML Cleaning and Two-Step ...

Apple’s App Store source map leak shows a preventable risk we found in 70% of organizations shipping production web apps.

A new cybercrime tool called ErrTraffic allows threat actors to automate ClickFix attacks by generating 'fake glitches' on ...

The transaction was settled and serviced through Membrane’s post-trade credit infrastructure and executed under a GMRA and Digital Asset Annex, establishing the first standardized stablecoin funding ...