I'd like to thank my co-author, Martin Zugec, for his valuable contributions to this report. This intrusion adds three dimensions to the public understanding of Chinese APT activity in contested ...

A security researcher has published a proof-of-concept tool called GhostLock that demonstrates how the legitimate Windows CreateFileW API can be abused to block access to files on local systems and ...

The Win32 module bundles small Perl wrappers around the Win32 API — process and user information, paths, shortcuts, registry keys, system metrics, and more. Most originated in the "Perl for Win32" ...

PCWorld reports that Windows 11 still relies on code from the 1990s, particularly the Win32 API from Windows 95, for basic functions like right-clicking. Microsoft CTO Mark Russinovich acknowledges ...

A newly observed variant of Remcos RAT has introduced real-time surveillance features and stronger evasion techniques, marking a shift in how the malware operates on compromised Windows systems. The ...

Cybersecurity researchers have shed light on a previously undocumented threat actor called TA585 that has been observed delivering an off-the-shelf malware called MonsterV2 via phishing campaigns. The ...

If the storage space on the C drive is running low, every free gigabyte counts. Windows often occupies more than 25 GB of space for things such as updates, restore points, and cache files. Plus, ...

The Matanbuchus malware loader has been seen being distributed through social engineering over Microsoft Teams calls impersonating IT helpdesk. Matanbuchus is a malware-as-a-service operation seen ...

Signal Messenger is warning the users of its Windows Desktop version that the privacy of their messages is under threat by Recall, the AI tool rolling out in Windows 11 that will screenshot, index, ...

Microsoft's Windows 11 24H2 update is frustrating some users, but it isn't the operating system at fault this time. Instead, it's down to a 20-year-old error in Grand ...

The Chinese espionage-focused APT tracked as Mustang Panda has used an updated backdoor and several new tools in a recent attack, cybersecurity firm Zscaler reports. Active for over a decade, the ...