WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

Researchers have found three methods to bypass Apple's Private Relay which is supposed to shield users' IP addresses and location.

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

I installed over 100 Claude Code plugins so you don't have to. Here's the signal from the noise.

With 3.5 billion active users to protect, Google is relying on Gemini to find Chrome security bugs fast - and before ...

Google has finally resolved the widespread Search time filter problem that broke the operation of date-restricted results.

AI models are finding thousands of zero-day flaws in minutes, forcing defenders to adopt automated, real-time virtual ...

This week’s ThreatsDay Bulletin covers malicious packages, AI agent risks, phishing chains, exposed systems, router flaws, ...