SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Your dream product could be a few prompts away.
The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has ...
This week’s ThreatsDay covers supply chain attacks, fake help desks, wiper malware, AI prompt traps, RMM abuse, phishing kits ...