A major overhaul of the Model Context Protocol due next month removes several longstanding protocol-level security risks but ...

Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating rogue administrator accounts without authentication. The vulnerability, tracked ...

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. Miasma appears to be an evolution ...

If this project helps your Cocos workflow, please consider giving it a Star. It helps more developers discover the project and supports ongoing development. Funplay MCP for Cocos is an MIT-licensed ...

A vulnerability in the popular Ultimate Member WordPress plugin enables account takeover by exposing password reset links.

By expressing form behavior in terms of state and derivation rather than orchestration and reaction, Angular Signal Forms ...

Data centre and critical infrastructure power systems manufacturer Master Power Technologies (MPT) has opened a customer ...

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing ...

Check Point says VPN zero-day CVE-2026-50751 was exploited by a Qilin-linked actor, prompting emergency hotfixes and a CISA patch deadline.

This week’s recap covers exploited flaws, supply chain attacks, phishing kits, AI lures, macOS stealers, urgent CVEs, tools, ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...