In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.

Sophos says Claude Code, Cursor, and Codex triggered Windows endpoint rules for credential access, LOLBin downloads, and ...

The modular Golang backdoor combines remote administration, multiple disk-wiping logics, and a Crucio-derived ransomware ...

SCMBANKER watches banking windows, captures screenshots, hijacks CLABE and card numbers, and can deploy Remote Utilities for ...

Federal agencies operating on-premises Microsoft SharePoint Server are under a hard patch deadline today — July 4, 2026 — after the U.S. Cybersecurity and Infrastructure Security Agency confirmed on ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

When looking at work folders, I think you often see files lined up in a state like the one below. Usually, these are files that were copied and pasted to keep a previous state (as a backup) during ...

Opera has rolled out Paste Protect, a built-in browser defence designed to stop malicious clipboard commands before users can paste them into terminals, run boxes or other command-line tools. The ...

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...

A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an ...

An AI agent carried out the technical execution of a real-world ransomware attack for the first known time, but new details ...