How can an extension change hands with no oversight?

ThreatsDay roundup covering stealthy attacks, phishing trends, exploit chains, and rising security risks across the threat landscape.

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

You can now run LLMs for software development on consumer-grade PCs. But we’re still a ways off from having Claude at home.