Attackers exploit FortiGate vulnerabilities to steal LDAP credentials and breach networks, enabling AD access and malware deployment.

VOID#GEIST malware campaign delivers XWorm, AsyncRAT, and Xeno RAT using batch scripts, Python loaders, and explorer.exe ...

Coverage claims without context are one of the most persistent sources of confusion in security tooling. This post breaks down four myths behind ATT&CK coverage claims and offers a more useful ...

Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor.

ESET researchers document how the Sednit APT group has reemerged with a modern toolkit centered on two paired implants – BeardShell and Covenant.

China linked APT41 hackers deploy Silver Dragon campaign targeting organizations with malware and espionage tactics.

Threat groups are weaponizing industrial control access they’ve gained over the years, but critical infrastructure operators ...

This week, Cisco patches and hacks. Trojanized app targeted Israelis. Bye-bye, Tycoon 2FA. Also bye-bye LeakBase. A ...

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations. Researchers at cybersecurity ...

Unwitting victims are now being tricked into installing malware via Windows Terminal, but some experts say this is old news.

Discover the Windows 11 Pro features every professional should enable in 2026, including BitLocker, Hyper-V, Sandbox, and Remote Desktop. When you purchase through links on our site, we may earn an ...