From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...

A major PowerShell change that worried many IT admins has been postponed, but Microsoft's long-term plans remain unchanged.

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Gone in a heartbeat.

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

DNS testing is wonderful, but it can be a confusing mess.

Huntress 发现一个由 AI 生成的 PowerShell 脚本，用于 AD 侦察，表明攻击者正利用 AI 创建定制化、具备规避能力的工具。 2026 年 6 月 3 日，在一次事件响应调查中，Huntress 分析师 Jevon Ang 从一台被入侵的 Windows Server 中恢复了一个 PowerShell 脚本。攻击者曾使用该脚本绘制受害者 Active Directory 环 ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

Microsoft has announced that passkeys will become the default authentication method for the Entra ID enterprise identity ...

The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.