Tomiris is using public-service C2 implants and new phishing chains to stealthily deploy multi-language malware across targeted government networks.

A new cyberattack is using cloned adult websites and a convincing full-screen Windows Update display to trick users into running malicious commands that install multiple password-stealing malware, ...

Not surprisingly, retailers are some of the most at risk during the holiday season. Google notes that criminals will set up fake websites that impersonate well-known brands, offering amazing deals on ...

The new ToddyCat tooling shifts the group’s focus from browser theft to extracting Outlook mail archives and Microsoft 365 ...

This blog is intended to share an in-depth analysis of a recent multi-stage attack attributed to the Water Gamayun advanced persistent threat group (APT). Drawing on telemetry, forensic reconstruction ...

A new ClickFix variant ratchets up the psychological pressure to 100 and addresses some technical mitigations to classic ClickFix attacks.

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...

Huntress analysts reconstructed a Qilin ransomware attack from a single endpoint, using limited logs to reveal rogue ...

Microsoft admits to problems after installing July updates for Windows 11 24H2 – especially for non-persistent installations.

PowerShell helps IT experts manage IIS web server farms with dozens or hundreds of app pools. Learn how to manage IIS ...

A new WhatsApp malware targets Brazilian users, stealing banking and crypto data while spreading through hijacked contacts.