ThreatsDay Bulletin tracks active exploits, phishing waves, AI risks, major flaws, and cybercrime crackdowns shaping this week’s threat landscape.

Modern PDF platforms can now function as full attack gateways rather than passive document viewers.

Vulnerabilities in PDF platforms from Foxit and Apryse could have been exploited for account takeover, data exfiltration, and ...

Leaked API keys are nothing new, but the scale of the problem in front-end code has been largely a mystery - until now. Intruder's research team built a new secrets detection method and scanned 5 ...

“Once contribution and reputation building can be automated, the attack surface moves from the code to the governance process around it. Projects that rely on informal trust and maintainer intuition ...

Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into ...

Swagger UI allows anyone — be it your development team or your end consumers — to visualize and interact with the API’s resources without having any of the implementation logic in place. It’s ...

This piece is copublished by DeSmog and ExxonKnews. ExxonKnews is a reporting project of the Center for Climate Integrity. The U.S. oil lobby aims to bulldoze European climate regulations as a top ...

ST Pharm has struck a deal with an undisclosed U.S.-based biotech to produce active pharmaceutical ingredients (APIs) for an upcoming oligonucleotide-based treatment. The Korean CDMO revealed the ...