ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Learn prompt engineering with this practical cheat sheet covering frameworks, techniques, and tips to get more accurate and ...

Checkmarx suffers a second supply chain attack in a month, resulting in hackers injecting credential-stealing malware into ...

A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and ...

Security researchers at OX Security have exposed an architectural vulnerability in Anthropic's Model Context Protocol (MCP) ...

Distinct cerebellar projections to the forebrain differentially support acquisition and offline consolidation of a motor skill engaging cerebello-striato-cortical circuits, revealing the temporal and ...

Every secure API draws a line between code and data. HTTP separates headers from bodies. SQL has prepared statements. Even email distinguishes the envelope from the message. The Model Context Protocol ...

Beyond compliance: Maturing the IFRS 9 framework for the modern lenderBy Theunis Jansen van Rensburg, Head of Analytics, PrincipaIssued by Hyperclear TechJohannesburg, 22 Apr 2026 Theunis Jansen van ...

The Ruby vulnerability is not easy to exploit, but allows an attacker to read sensitive data, start code, and install ...

Google Cloud introduced a new AI agent platform, updated data architecture, and eighth-generation TPUs at Next 2026.