Attackers combined remote access, credential theft and data collection tools to quietly gather and remove sensitive ...

Many users first register a messaging app on an Android phone and only later install the Windows version. That sequence is ...

Introduction Installing a desktop messaging app on Windows requires more user judgment than installing a mobile app ...

An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian ...

SEBI has alerted companies about the rising ‘Boss Scam’, where fraudsters impersonate top executives using AI and WhatsApp to ...

Expel links CylindricalCanine to DigiCert's April 2026 breach, where stolen certificates were used to sign Zhong Stealer and ...

Cursor IDE zero-day vulnerability: AI security firm Mindgard spent seven months trying to report a Windows code-execution ...

Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...

ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

Attackers were found using a Lua-based malware loader posing as a TrueType font tile, with layered obfuscation and fileless ...

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...