The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the ...

Kaspersky reports ToddyCat’s Umbrij abuses headless Chromium and OAuth flows to extract Gmail authorization codes, enabling ...

A random web page should not feel as risky as installing a shady app. That is what makes this browser-only ransomware technique so uncomfortable. It can use Chrome’s own File System Access API to ...

ThreatsDay Bulletin covers this week’s cyber threats, from phishing and ransomware to exposed AI systems, sandbox flaws, and ...