Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Spirals ransomware can encrypt a network in under 24 hours. See how it uses IIS access, Windows tools, and double extortion ...

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in ...

My ISP was fastest, Cloudflare was slower, and Mullvad sent my queries halfway around the world ...

From a rushed ShareFile shutdown to poisoned npm packages and AI assistants tricked into installing malware, here's every ...

Windows administrators face a hard, irreversible deadline in three days: when July 14's cumulative update installs, Microsoft permanently removes the registry key that allowed domain controllers to ...

The GigaWiper backdoor combines several malware families and can sabotage systems using a wiper, encryption, and wiping ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

The modular Golang backdoor combines remote administration, multiple disk-wiping logics, and a Crucio-derived ransomware ...