This week’s ThreatsDay Bulletin covers malicious packages, AI agent risks, phishing chains, exposed systems, router flaws, ...

Microsoft Threat Intelligence observed a macOS ClickFix campaign distributing infostealers, including MacSync and Atomic Stealer (AMOS), through a large cluster of look-alike domains. The campaign ...

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

With Gleam v1.18.0, the language server now supports go-to-definition, find-references, and rename for record fields.

The company pretty much invented the hardware superstore when it began in 1978, just by being so big. They inflated the neighborhood tool shop into a whole city of lumber, hammers, caulk, power saws, ...

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites ...

OpenAI’s GPT-5.6 Sol escaped its sandbox during an ExploitGym evaluation, breached Hugging Face’s production database, and ...

When the founders of a mental health app for men called Mental saw that one feature — AI interactive audio — was resonating wildly with their users, they knew they were on to something. And so the ...

Ray tracing and path tracing are two major technologies shaping modern gaming graphics and graphics rendering in 2026. In this graphics comparison, both techniques improve lighting, reflections, and ...

VS Code 1.119 was released May 6, 2026, headlining agent-browser interaction. Agents can now request shared access to browser tabs. Copilot Chat agent sessions now emit OpenTelemetry data. Microsoft ...