Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...

The Indian Computer Emergency Response Team (CERT-In) has issued a cybersecurity advisory warning users about a malware campaign that is spreading through WhatsApp using fake invoices, bank statements ...

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the fake .ttf extension, a Lua-based loader is slipped onto Windows systems and a ...

According to new research from Blackpoint Cyber's Adversary Pursuit Group (APG), published on July 30, the intrusion hit two ...

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...

One config file, and Sandbox stops being a one-trick pony.

Silver Fox uses a three-driver BYOVD framework, DLL sideloading, and dual watchdogs to keep ValleyRAT running at a Japanese ...

Researchers released a proof-of-concept (PoC) exploit for a now-patched flaw in Microsoft's Active Directory Certificate Services (AD CS) that can allow a low-privileged domain user to impersonate a ...

The 2026/27 Championship season is almost upon us. After a busy summer with World Cup action, EFL supporters are gearing up ...

Attackers used Hermes, an autonomous open source tool, in unrestricted "YOLO mode" to conduct espionage against Thailand's ...

The 2026 World Cup showed FIFA borrowing the U.S. sports playbook just as American soccer interest hit another temporary high ...