ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Cloud automation uses software to handle tasks like setting up servers or deploying applications, cutting down on manual work ...

Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.

今天凌晨，Anthropic对Claude Code进行了全面重构 ，并发布了一个非常奈斯的功能—Routines（常规任务）。ps：顺便一提，业内小道消息也在传：Opus 4.7（代号 capybara-v2）本周也可能要发布！