#stories


ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

Oct 1, 2026 // 19:50

This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system […]

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

Sep 24, 2026 // 23:38

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you […]

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Sep 17, 2026 // 20:40

Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, […]

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

Sep 10, 2026 // 23:29

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for […]

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

Sep 3, 2026 // 23:22

The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow.” […]

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

Aug 27, 2026 // 19:40

A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into […]

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Aug 14, 2026 // 00:09

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of […]

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

Aug 7, 2026 // 01:16

Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF […]

ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

Jul 30, 2026 // 18:28

A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide, a […]

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

Jul 23, 2026 // 18:40

Most of this week’s trouble came dressed as something useful. A package stole data. A fake extension opened remote access. A safety app became spyware. […]

1 2 3 Next