Attackers were found using a Lua-based malware loader posing as a TrueType font tile, with layered obfuscation and fileless ...

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...

Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of ...

Windows Defender zero-day CVE-2026-50656 — known as RoguePlanet — has been patched by Microsoft 29 days after researcher ...

A fileless malware framework is abusing Google’s Blogspot platform to deliver PureLog Stealer directly into computer memory, sharpening concerns that trusted web services are being turned into staging ...

Microsoft continues investing in Windows 11 instead of launching Windows 12, shifting its focus toward AI services and ...

The Indian Computer Emergency Response Team (CERT-In) has issued a cybersecurity advisory warning users about a malware ...

Researchers say the highly effective social engineering technique is no longer the exception for malware attacks — it's now the rule.

A fileless malware framework has been abusing Google's Blogspot platform to deliver the PureLog Stealer entirely in memory, letting attackers steal credentials while leaving few traces on disk.

Turns out Windows already gives you all the tools you need to block distracting apps and websites—you just have to put them ...