The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted ...

CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.

PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...

AttackIQ has released a new attack graph that emulates the behaviors of NightSpire Ransomware, a financially motivated ...

Analysis shared by vx-underground says the malicious installer appears to have targeted 64-bit HWMonitor users and included a ...

Ukrainian municipal authorities and healthcare institutions have come under a coordinated wave of cyberattacks that security officials say was designed to steal sensitive information from web browsers ...

MSBuild, a legitimate Microsoft build tool embedded in many Windows and developer environments, is drawing renewed scrutiny after fresh threat research showed how attackers are using it to run ...

Microsoft has introduced new Windows protections to defend against phishing attacks that abuse Remote Desktop connection ...

PowerShell's scripting language and ability to interact directly with Windows system elements give it a superpower that ...

Windows displays a security warning when opening RDP files (.rdp), but you can skip the consent prompt for RDP connections in ...

Cargo-stealing hackers have a new trick up their sleeve: using a third-party code-signing service makes their remote ...

Threat actors are exploiting three recently disclosed Windows security vulnerabilities in attacks aimed at gaining SYSTEM or ...