This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

My home server finally earned its electricity bill.

An open WP-SHELLSTORM server exposed tools, logs, and target lists naming 1.4 million sites, with researchers validating ...

一个没有开放数据库端口的内网，一个密码足够复杂的数据库账号，一台没有任何Web漏洞的服务器——却在一夜之间被勒索病毒加密了全部文件。 更诡异的是，所有日志干干净净，没有任何入侵痕迹。 仿佛黑客是“隔空取物”。 这不是电影情节。过去几个月，Solar安全应急响应团队连续处置了多起这样的“幽灵入侵”事件。受害者有一个惊人的共同点：他们都装了管家婆。 管家婆系列软件（辉煌Ⅱ、TOP+、ERP等）是国内中 ...

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

We've decided to retire and archive this project - there's just no safe way to run Python within pyodide safely with reasonable latency. Instead, we're working hard on Monty which should solve the ...

In this post, we are going to discuss what Energy Server Service queencreek process is and if you can uninstall it or not. This process is usually associated with the Intel Driver Update utility.

MCP Server for Azure AI Foundry (experimental) has moved to the cloud, now as Foundry MCP Server (preview). Please check the official public documentation at Get started with Foundry MCP Server ...

Windows Server 2025 comes with great developments like Hotpatching for everyone, next-generation Active Directory and SMB, Mission Critical Data & Storage, Hyper-V & AI, etc. To get these features and ...