Three malicious RubyGems packages in the SleeperGem attack skip CI runners, target developer machines, and install persistent ...

ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...

Security firm Group-IB has uncovered ClickLock Stealer, a new Mac threat that hijacks normal system behavior to pressure ...

A new macOS information-stealing malware dubbed ClickLock terminates all visible processes to force users into entering their ...

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.

A desktop within my desktop comes in handy a surprising amount of times ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...

Gone in a heartbeat.

ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI ...