The Qilin ransomware operation was spotted executing Linux encryptors in Windows using Windows Subsystem for Linux (WSL) to ...

Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...

Two Windows vulnerabilities—one a zero-day that has been known to attackers since 2017 and the other a critical flaw that Microsoft initially tried and failed to patch recently—are under active ...

Cybersecurity, Cyber Espionage, Malware, PlugX, Data Breach, Vulnerability, Phishing, European Union, Threat Intelligence ...

The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...

Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...

An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.

If you back up both your data and your encryption key, your files should remain safely accessible to you (and only you). Open ...

Windows File Explorer previews can expose NTLM password hashes, putting your security at risk. Here’s what you should know to stay protected.

Microsoft Incident Response – Detection and Response Team (DART) researchers uncovered a new backdoor that is notable for its novel use of the OpenAI Assistants Application Programming Interface (API) ...

Installing apps from the internet can be dangerous, but a package manager can reduce a lot of that risk — and Windows has one ...