#threatsday


ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

Oct 1, 2026 // 19:50

This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system […]

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

Sep 24, 2026 // 23:38

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you […]

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Sep 17, 2026 // 20:40

Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, […]

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

Sep 10, 2026 // 23:29

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for […]

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

Sep 3, 2026 // 23:22

The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow.” […]

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

Aug 27, 2026 // 19:40

A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into […]

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

Aug 20, 2026 // 23:44

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate […]

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Aug 14, 2026 // 00:09

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of […]

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

Aug 7, 2026 // 01:16

Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF […]

ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

Jul 30, 2026 // 18:28

A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide, a […]

1 2 3 Next