A major PowerShell change that worried many IT admins has been postponed, but Microsoft's long-term plans remain unchanged.

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...

Gone in a heartbeat.

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

Huntress 发现一个由 AI 生成的 PowerShell 脚本，用于 AD 侦察，表明攻击者正利用 AI 创建定制化、具备规避能力的工具。 2026 年 6 月 3 日，在一次事件响应调查中，Huntress 分析师 Jevon Ang 从一台被入侵的 Windows Server 中恢复了一个 PowerShell 脚本。攻击者曾使用该脚本绘制受害者 Active Directory 环 ...

DNS testing is wonderful, but it can be a confusing mess.

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...

Cybersecurity investigators have uncovered an AI-generated PowerShell script used during a live attack to map a company’s Active Directory environment, offering fresh evidence that criminals are ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an ...

GodDamn ransomware, tied by Symantec to Hyadina's Beast lineage, uses AnyDesk, PsExec, and PoisonX to move and evade defenses ...