This week’s ThreatsDay Bulletin covers malicious packages, AI agent risks, phishing chains, exposed systems, router flaws, ...

Microsoft Threat Intelligence observed a macOS ClickFix campaign distributing infostealers, including MacSync and Atomic Stealer (AMOS), through a large cluster of look-alike domains. The campaign ...

A UK AISI test found an AI agent created fake identities and tried to plant malicious code in a real open-source software project.

SwamCam, a developer of advanced pool-safety and drowning-prevention technology, today announced the launch and immediate availability of its new Door and ...

Upwind identified a malicious release of keyv@6.0.0 that harvested AWS, GitHub, and npm credentials via a hidden preinstall script. With 154 million weekly downloads, the compromise had ecosystem-wide ...

Less than 24 hours after an AMBER alert was issued for 2-year-old Aryana Trevino Martinez, the search has been discontinued. The San Antonio Police Department says the toddler was found unresponsive ...

MAXMEL Tech Ltd. announces that WEXTL®, a visual workflow builder for deploying AI Agents at scale, has officially moved from its closed beta to full public production. Positioned as a high-capacity ...

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites ...

Calgary Police say an 11-year-old boy who has been missing since July 16 – and whose disappearance sparked a massive search by officers and community members – has been found dead.

VS Code update brings info on running subagents into the Agents window and previews built-in dictation and a Markdown editor ...

Russia-linked hackers have been quietly raiding inboxes at organizations that rely on the Zimbra Collaboration Suite, and in ...

Chrome Firefox security update July 2026 delivered emergency patches across five vendors on July 15: Mozilla confirmed public exploit code for both critical Firefox 152.0.6 CVEs, Google patched two ...