The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted ...

CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.

PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...

AttackIQ has released a new attack graph that emulates the behaviors of NightSpire Ransomware, a financially motivated ...

Ukrainian municipal authorities and healthcare institutions have come under a coordinated wave of cyberattacks that security officials say was designed to steal sensitive information from web browsers ...

MSBuild, a legitimate Microsoft build tool embedded in many Windows and developer environments, is drawing renewed scrutiny after fresh threat research showed how attackers are using it to run ...

Microsoft has introduced new Windows protections to defend against phishing attacks that abuse Remote Desktop connection ...

Nearly every major product family needs immediate patching, from Windows to Office to Microsoft Edge, SQL Server, and even ...

Cargo-stealing hackers have a new trick up their sleeve: using a third-party code-signing service makes their remote ...

Microsoft has shipped one of the most practically useful security updates in recent memory, and if you work in an environment ...

Windows displays a security warning when opening RDP files (.rdp), but you can skip the consent prompt for RDP connections in ...

Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installer ...