ThreatsDay Bulletin tracks active exploits, phishing waves, AI risks, major flaws, and cybercrime crackdowns shaping this week’s threat landscape.

Abstract: The quality of modern software relies heavily on the effective use of static code analysis tools. To improve their usefulness, these tools should be evaluated using a framework that ...

Use the vitals package with ellmer to evaluate and compare the accuracy of LLMs, including writing evals to test local models.

Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.

A new variation of the fake recruiter campaign from North Korean threat actors is targeting JavaScript and Python developers ...