ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

This useful unofficial Windows 11 app has received a significant upgrade, delivering faster performance and smoother ...

Gone in a heartbeat.

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

Huntress 发现一个由 AI 生成的 PowerShell 脚本，用于 AD 侦察，表明攻击者正利用 AI 创建定制化、具备规避能力的工具。 2026 年 6 月 3 日，在一次事件响应调查中，Huntress 分析师 Jevon Ang 从一台被入侵的 Windows Server 中恢复了一个 PowerShell 脚本。攻击者曾使用该脚本绘制受害者 Active Directory 环 ...

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...

Windows administrators face a hard, irreversible deadline in three days: when July 14's cumulative update installs, Microsoft permanently removes the registry key that allowed domain controllers to ...

My terminal is still there. Beszel just stopped it from being my dashboard.

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Windows Defender zero-day CVE-2026-50656 — known as RoguePlanet — has been patched by Microsoft 29 days after researcher ...