Latrodectus is a Windows loader that downloads other malware, seen in phishing and ClickFix attacks. See what it does, how to ...

That old Java icon had a much bigger résumé than I gave it credit for.

Node.js is a standard server-side JavaScript runtime used by many companies, including Netflix and LinkedIn. According to W3Techs data, it is used by approximately 7.4% of websites with known web ...

Hackers use fake Colombian court notices to trick organizations into installing XWorm, a remote access tool that enables PC ...

Antino backdoor abuses Microsoft 365, using Outlook and OneDrive for C2, data theft and persistent access to Windows systems.

The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...

A newly disclosed Microsoft Edge exploit chain combines logic vulnerabilities and Windows functionality to escape the browser ...

North Korean hackers linked to the Lazarus Group abused banking security software to deploy a layered malware toolkit against ...

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

A Google search for “claude mac” on or around October 5, 2026 could return a sponsored result that displayed bing.com as its web address and ended at a counterfeit Claude download page. The page ...

Security researchers have disabled an abandoned Popcorn Time updater on 2 million systems to prevent malicious abuse.

A server-controlled URL flowed from an MCP OAuth handshake into PowerShell on Windows and WSL. The fix shipped Sept. 28 with ...