UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

Path of Exile 2 can complete login and character selection normally, then fail as soon as the next area begins loading. The ...

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in ...

Zorin OS made running Windows apps on Linux much easier than I expected, without forcing me to manually configure Wine.

First phishing, then a fake captcha and a terminal command – this is how the cyberattack on Berlin proceeded, according to ...

Crooks are deploying cheeky browser-in-the-browser techniques to trick victims into downloading RMM tools.

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

Hackers hide AsyncRAT in Windows charmap.exe, using PowerShell and fake invoice files to evade detection and gain remote ...

When a victim opens the HTA, Windows invokes mshta. exe, a legitimate Microsoft utility designed to execute HTML Applications. The malicious file pushes its own window off-screen and loads remote ...

Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...