ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Spirals ransomware can encrypt a network in under 24 hours. See how it uses IIS access, Windows tools, and double extortion ...

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in ...

Post-quantum cryptography comes to Windows TLS with Microsoft’s July 14 Patch Tuesday update, which ships three ML-KEM hybrid ...

My ISP was fastest, Cloudflare was slower, and Mullvad sent my queries halfway around the world ...

From a rushed ShareFile shutdown to poisoned npm packages and AI assistants tricked into installing malware, here's every ...

Windows administrators face a hard, irreversible deadline in three days: when July 14's cumulative update installs, Microsoft permanently removes the registry key that allowed domain controllers to ...

A newly identified destructive Windows backdoor combines ransomware-like encryption with multiple data-wiping features, ...

The GigaWiper backdoor combines several malware families and can sabotage systems using a wiper, encryption, and wiping ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.