CountLoader enables Russian ransomware gangs to deploy Cobalt Strike and PureHVNC RAT via Ukraine phishing campaigns.

Google pushed an emergency patch for a high-severity Chrome flaw, already under active exploitation. So it's time to make ...

CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Security investigators from Google said UNC6395 hackers spent several months running through Salesloft and Drift systems before launching a data breach campaign that some security researchers say has ...

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...

Ethereum core developer Zak Cole foiled a phishing attempt disguised as a podcast invite, exposing a fake StreamYard malware ...

A sophisticated fileless malware campaign has been observed using legitimate tools to deliver AsyncRAT executed in memory ...

A rare in-the-wild FileFix campaign has been observed by cybersecurity researchers, which hides a second-stage PowerShell ...

ClickFix typically asks the victim to perform a fake CAPTCHA test. FileFix tricks the user into copying and pasting a command ...

Two billion downloads per week. That’s the download totals for the NPM packages compromised in a supply-chain attack this ...

Designed to streamline the way operators manage avionics software updates and configuration data, Teledyne's next-generation ...