SOCRadar details E4del and PINHOLE RAT campaigns using FTP banners as dead drop resolvers to fetch commands and C2 details.

StopAndProtect uses close to 2,000 hacked WordPress sites to deliver malware and run C2, compromising 6,000+ unique IP ...

Microsoft removed WMIC from a Windows 11 Beta build. Learn what the change means for security, legacy scripts, and supported ...

AI is making phishing attacks more personalized, convincing, and difficult for traditional email filters to detect. Kaseya explains how MSPs can monitor identity, email, and endpoint activity to ...

Threat Actors Target Conference Attendees With Malware Lures** Huntress research shows attackers using X, Google Docs and GitHub after conferences to turn networking into malware delivery against ...

Check Point Research has uncovered a global cybercrime operation that quietly ran its entire infrastructure through nearly ...

Four IP addresses and one failed port forward finally made it click.

With the launch of its MCP server, Nutanix customers can build Agentic AI applications that have access to a robust tools ...

North Korea-linked threat actor Kimsuky has been observed targeting organizations in South Korea and Japan with ...

Kimsuky uses phishing and a malicious Chrome extension to steal Gmail messages, attachments, and control infected computers.

SynkLoader malware is spreading through Microsoft Teams phishing, using a fake Windows lock screen to steal credentials and enable remote access.

Teams phishing uses fake IT support messages to trick employees into installing SynkLoader through a malicious MSI file.