Cybersecurity researchers at Eye Research found a vulnerability in Time4Popcorn, an unofficial version of Popcorn Time, that ...

Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...

XWorm is a remote access trojan for Windows sold to criminals. See what it can take, how it gets in, what abuse.ch shows in ...

Microsoft Edge exploit chain combines five bugs and two Windows features to bypass the browser sandbox and execute code .

Latrodectus is a Windows loader that downloads other malware, seen in phishing and ClickFix attacks. See what it does, how to ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

I use Claude Code. But I wasn't familiar with the name Node.js.This was the point that caught my attention as a non-engineer ...

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

That old Java icon had a much bigger résumé than I gave it credit for.

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.