IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...
Late last year, social media debated whether MCP is dead because applications can use a command line interface (CLI) instead ...
Posting links on X through its API is now 1,900% more costly ...
A Linux variant of the GoGra backdoor uses legitimate Microsoft infrastructure, relying on an Outlook inbox for stealthy ...
ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.
Finding hijacked subdomains is straightforward. People need only enter site: [university].edu “xxx” or site: [university].edu ...
Breach tied to compromised AI tool may have exposed credentials used by app frontends, the user-facing layer that connects ...
Microsoft released an emergency patch for its ASP.NET Core to fix a high-severity vulnerability that allows unauthenticated ...
Microsoft's Data API Builder is designed to help developers expose database objects through REST and GraphQL without building a full data access layer from scratch. In this Q&A, Steve Jones previews ...
Patching is not enough: applications embedding the insecure library will need to be rebuilt, and affected tokens and cookies ...
OpenAI is capping off a busy week of announcements with the release of GPT-5.5, its latest model upgrade for ChatGPT and Codex. The company calls its new model “a new class of i ...
Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability ...