An abandoned Popcorn Time updater left millions of Windows and Mac computers open to remote takeovers, according to ...

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...

Latrodectus is a Windows loader that downloads other malware, seen in phishing and ClickFix attacks. See what it does, how to ...

That old Java icon had a much bigger résumé than I gave it credit for.

Node.js is a standard server-side JavaScript runtime used by many companies, including Netflix and LinkedIn. According to W3Techs data, it is used by approximately 7.4% of websites with known web ...

XWorm is a remote access trojan for Windows sold to criminals. See what it can take, how it gets in, what abuse.ch shows in ...

Hackers use fake Colombian court notices to trick organizations into installing XWorm, a remote access tool that enables PC ...

The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...

Hackers use fake PuTTY Google results to trick IT admins into installing trojanized Windows software that secretly deploys malware.

A newly disclosed Microsoft Edge exploit chain combines logic vulnerabilities and Windows functionality to escape the browser ...

North Korean hackers linked to the Lazarus Group abused banking security software to deploy a layered malware toolkit against ...

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.