ThreatsDay Bulletin tracks active exploits, phishing waves, AI risks, major flaws, and cybercrime crackdowns shaping this week’s threat landscape.

Modern PDF platforms can now function as full attack gateways rather than passive document viewers.

Vulnerabilities in PDF platforms from Foxit and Apryse could have been exploited for account takeover, data exfiltration, and other attacks.

W3C proposal backed by Google and Microsoft allows developers to expose client-side JavaScript tools to AI agents, enabling ...

Leaked API keys are nothing new, but the scale of the problem in front-end code has been largely a mystery - until now. Intruder's research team built a new secrets detection method and scanned 5 ...

OpenAI has recently published a detailed architecture description of the Codex App Server, a bidirectional protocol that decouples the Codex coding agent's core logic from its various client surfaces.

Swagger UI allows anyone — be it your development team or your end consumers — to visualize and interact with the API’s resources without having any of the implementation logic in place. It’s ...

This piece is copublished by DeSmog and ExxonKnews. ExxonKnews is a reporting project of the Center for Climate Integrity. The U.S. oil lobby aims to bulldoze European climate regulations as a top ...

ST Pharm has struck a deal with an undisclosed U.S.-based biotech to produce active pharmaceutical ingredients (APIs) for an upcoming oligonucleotide-based treatment. The Korean CDMO revealed the ...