ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.

We tried out Google’s new family of multi-modal models with variants compact enough to work on local devices. They work well.

CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...

Anthropic fixed a significant vulnerability in Claude Code's handling of memories, but experts caution that memory files will ...

To protect the Pixel modem from zero-day attacks, Google focused on the DNS parser. As cellular features have migrated to ...

Reclaiming my time, one prompt at a time ...

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

Anthropic's new initiative, Project Glasswing, unites a dozen major organizations—including Apple, Google, Microsoft, AWS, Nvidia, Cisco, CrowdStrike, JPMorgan Chase, Broadcom, Palo Alto Networks, and ...

Zhipu AI has released GLM-5V-Turbo, a multimodal model capable of generating code directly from images, video, and text inputs, including turning design mockups into functional code. The model relies ...

Coders have had a field day weeding through the treasures in the Claude Code leak. "It has turned into a massive sharing party," said Sigrid Jin, who created the Python edition, Claw Code. Here's how ...

Rust port is now in progress on the dev/rust branch and is expected to be merged into main today. The Rust implementation aims to deliver a faster, memory-safe harness runtime. Stay tuned — this will ...