Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named ...

A phishing campaign targeting cybersecurity conference attendees has been using Google Docs and other familiar online services to deliver malware, including a Windows payload that can install its own ...

DeadLock ransomware uses Polygon smart contracts, Session, and blockchain-hosted leak content to make extortion infrastructure harder to disrupt.

Kimsuky North Korea AI hacking expanded significantly: the spy group built a self-hosted LLM lab inside its own attack ...

StopAndProtect uses close to 2,000 hacked WordPress sites to deliver malware and run C2, compromising 6,000+ unique IP ...

Microsoft announced a Domain Exclusion for M365 Copilot, but withdrew the feature shortly after. The reasons are unclear.

My backups stopped running and Windows never said a word.

China-linked backdoor QUICAgent breached Myanmar's government networks by routing spy traffic over QUIC - the encrypted ...

You don't know what might bypass your filters until you test them ...

StopAndProtect turned nearly 2K hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance ...

A Huntress researcher was contacted by an X account with the handle "@HartmansDoeke," who claimed to be the vice president ...

An exposed operator directory reveals how one actor compromised 14,000+ Dahua cameras across Ukraine and Russia, no password ...