This week’s ThreatsDay Bulletin covers malicious packages, AI agent risks, phishing chains, exposed systems, router flaws, ...

FortiGuard exposes year-long QuickFox VPN supply chain attack deploying FDMTP implant on corporate Windows machines only.

Microsoft Threat Intelligence observed a macOS ClickFix campaign distributing infostealers, including MacSync and Atomic Stealer (AMOS), through a large cluster of look-alike domains. The campaign ...

NullReceiver lets two North Korea-linked npm packages decode a C2 IP from blank Ethereum transfers without smart contracts or ...

Spread the loveThe internet, as we know it, is a constantly evolving beast. What was groundbreaking a few years ago is now ...

Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks ...

The 2026 Threat Hunting Report traces a multiyear shift from conventional intrusions toward attacks that exploit trusted identities, cloud services, AI systems and software dependencies.

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

“I am glad it cannot happen twice, the fever of first love,” opines the main character in Daphne du Maurier’s gothic novel, Rebecca. “For it is a fever, and a burden, too, whatever the poets may say.” ...

Claude Code creator Boris Cherny advises developers to delete and rewrite system prompts. Testing with claude_code_simple=1 ...