Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...

On October 30, 2026, Visual Studio has released a fix via CVE-2026-118147. Affected versions include Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft ...

The vulnerable Brotli decoder may be present in a range of runtimes, libraries, and software packages, including Node.js, Bun, Python Brotli bindings, .NET, Envoy Proxy, Istio, Java brotli4j, ...

A cryptocurrency mining campaign has resurfaced on Hugging Face shortly after its earlier accounts were removed, using fake ...

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...

While investigating critical vulnerabilities in PHP, a problem involving Node.js and Python has now emerged. Commonly known ...

This week delivered critical firewall patches, rented banking malware, weaponized PDFs, and zero-permission token theft alongside supply-chain hijacks and AI-powered attacks. Attackers borrowed trust ...

This week's ThreatsDay covers 40K exposed secrets, AI-powered ransomware, GitHub supply chain attacks, critical flaws, and ...