Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

Huntress spotted a white whale - a malicious toolkit stored as a database object.

Spread the loveFor years, when you mentioned automation in the context of enterprise IT, many people immediately thought of Linux servers, network devices, and perhaps a sprinkle of cloud ...

StopAndProtect turned nearly 2K hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance ...

Threat actors are increasingly exploiting overlooked Active Directory service principal name misconfigurations, making ...

Spread the loveRunning out of disk space in a virtual machine is one of those nagging problems that can sneak up on you. One ...

NCC Group's July threat report highlights Jadepuffer, an AI-driven ransomware operation that can carry out much of an attack without a human directing every step. Jadepuffer can change tactics when an ...

A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

AI-powered PLC attacks, GitLab exploits, npm backdoors, cloud leaks, auth abuse, and payment fraud lead this week’s ...

A toolkit shaped by decades of Unix history makes technical work second nature on Linux.