Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

Attackers were found using a Lua-based malware loader posing as a TrueType font tile, with layered obfuscation and fileless ...

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...

New TELEPUZ malware spreads through ClickFix, then steals browser cookies, logs keystrokes, runs commands, and installs ...

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...

A fake GitHub repository campaign created hundreds of malicious projects that impersonated legitimate software and cybersecurity tools. The repositories directed users to deceptive download pages that ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

CrashStealer, a newly documented Mac infostealer, used an Apple-notarized meeting app to reach victims before stealing ...

Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that ...