Microsoft

ACR Stealer: Two observed intrusion chains amid increased threat activity

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

New OkoBot framework deploys 20 payloads to steal data, crypto

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...
OSTechNix

How to Use the AUR Safely: Lessons from the June 2026 AUR Malware Attack

Learn how to use the Arch User Repository (AUR) safely. Discover the lessons from the June 2026 AUR malware attack and ...

Now, even Russia’s most elite hackers are using Clickfix to infect devices

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
The Hacker News

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...

This Android malware can spy on your screen, read your texts, and control your phone remotely

A new version of RedHook Android malware uses your phone's own built-in debugging tool to take remote control of your device without needing root access or a USB cable.
The Hacker News

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...
GitHub

Docker container for MusicBrainz Picard

This project provides a lightweight and secure Docker container for MusicBrainz Picard. Access the application's full graphical interface directly from any modern web browser - no downloads, installs, ...