ThreatsDay Bulletin tracks active exploits, phishing waves, AI risks, major flaws, and cybercrime crackdowns shaping this week’s threat landscape.

安全更新解决了Foxit PDF Editor Cloud中的关键跨站脚本(XSS)漏洞，这些漏洞可能允许攻击者在用户浏览器中执行任意Java代码。 这些漏洞是在应用程序的文件附件列表和图层面板中发现的，由于输入验证不足和输出编码不当，为恶意代码执行创造了路径。 已发现两个 ...

Swagger UI allows anyone — be it your development team or your end consumers — to visualize and interact with the API’s resources without having any of the implementation logic in place. It’s ...

This piece is copublished by DeSmog and ExxonKnews. ExxonKnews is a reporting project of the Center for Climate Integrity. The U.S. oil lobby aims to bulldoze European climate regulations as a top ...

ST Pharm has struck a deal with an undisclosed U.S.-based biotech to produce active pharmaceutical ingredients (APIs) for an upcoming oligonucleotide-based treatment. The Korean CDMO revealed the ...