Storm-0249 now employs ClickFix, fileless PowerShell, and DLL sideloading to gain stealthy access that enables ransomware ...

North Korea-linked attackers exploit CVE-2025-55182 to deploy EtherRAT, a smart-contract-based RAT with multi-stage ...

Splunk for Windows has a high-severity flaw that lets local users escalate privileges through misconfigured file permissions.

Over 77,000 Internet-exposed IP addresses are vulnerable to the critical React2Shell remote code execution flaw (CVE-2025-55182), with researchers now confirming that attackers have already ...

Gemini vs. Copilot: I tested the AI tools on 7 everyday tasks, and it wasn't even close ...

After noticing a spike in detections involving what looked like a movie torrent for One Battle After Another, Bitdefender researchers started an investigation and discovered that it was a complex ...

The ClickFix campaign disguises malware as legitimate Windows updates, using steganography to hide shellcode in PNG files and ...

Unlock the power of automated GitHub downloads.

Water Saci has upgraded its self-propagating malware to compromise banks and crypto exchanges by targeting enterprise users ...

A custom loader initiated the vulnerable driver, located targeted endpoint detection services then issued kernel-level ...

The initial access broker has been weaponizing endpoint detection and response (EDR) platforms and Windows utilities in ...

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook.