The initial access broker has been weaponizing endpoint detection and response (EDR) platforms and Windows utilities in ...

A RunDLL error occurs when a DLL file that is needed to start with a program, run at startup, or set up as a scheduled task fails to start. Windows tries to load this ...

The flaw, tracked as CVE-2025-9491, allowed cybercriminals to hide malicious commands from users inspecting files through ...

However, NirLauncher has improved my approach to Windows troubleshooting. This free portable toolkit bundles over 200 utilities from NirSoft into a single package that doesn't require installation.

Storm-0249 now employs ClickFix, fileless PowerShell, and DLL sideloading to gain stealthy access that enables ransomware ...

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

Several ransomware groups have been spotted using a packer-as-a-service (PaaS) platform named Shanya to assist in EDR ...

Research shows a .NET proxy design flaw enables file writes and RCE through attacker-supplied WSDL in multiple products.

Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data ...

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook.

A new malware campaign has been identified using a Python-based delivery system to deploy CastleLoader malware ...

A security vulnerability has been discovered in Bitdefender's antivirus software that allows attackers to escalate their privileges within the system. Various Bitdefender versions are affected.