Technology

A China-aligned threat actor has set its sights on European government and diplomatic organizations since mid-2025, following a two-year period…

Threat actors are increasingly using HTTP cookies as a control channel for PHP-based web shells on Linux servers and…

The next major breach hitting your clients probably won't come from inside their walls. It'll come through a vendor they trust,…

The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a…

Solana-based decentralized exchange Drift has confirmed that attackers drained about $285 million from the platform during a security…

Cybersecurity researchers have discovered a new version of the SparkCat malware on the Apple App Store and Google Play Store,…

A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal database credentials,…

Cisco has released updates to address a critical security flaw in the Integrated Management Controller (IMC) that, if successfully…

The latest ThreatsDay Bulletin is basically a cheat sheet for everything breaking on the internet right now. No corporate fluff…

In December 2025, we shared the first-ever The State of Trusted Open Source report, featuring insights from our product data…