Living-off-the-land binaries, often shortened to LOLBins, are legitimate Windows tools that attackers abuse to execute commands, download payloads, move laterally, or hide activity inside normal ...
Attackers used AI to revive a blocked attack on a US retailer, generating error-free scripts that enabled rapid lateral movement.
SCKit exploits patched ScreenConnect flaw CVE-2026-84869 and attempts to hijack technician sessions to spread across managed endpoints.
A new group called Citrus is attacking Windows networks. It uses tunnels that look like normal web traffic, scripts written ...
Hackers are hijacking ScreenConnect, a tool that many IT companies use to manage their clients’ computers remotely. The ...
Citrus ransomware abuses Windows Group Policy to disable Microsoft Defender and spread malware across entire corporate ...
Attackers deployed SCKit, a malicious toolkit with worm-like propagation capabilities, across at least 288 endpoints ...
Huntress researchers have detailed a fast-moving campaign in which attackers abused cloud-hosted ScreenConnect panels to install rogue clients and a custom tool ...
Attackers abuse ScreenConnect access to deploy SCKit malware, targeting at least 288 endpoints across 48 organizations.
Update 11/11/26: Added additional information from ConnectWise and Huntress. ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ...
Servidores Qlik Sense estão na mira de ataques com PowerShell, backdoors em Go e exploits para ActiveMQ e Veeam. Entenda os ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results