SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR hunting.
Recently, "Strata" has been gaining attention in the local LLM community.It is an application that allows you to run large ...
Many information technology (IT) professionals use Windows Software Update Services (WSUS) to manage updates across all their Windows systems and other third-party software. When WSUS is paired with ...
Hackers are hijacking ScreenConnect, a tool that many IT companies use to manage their clients’ computers remotely. The ...
Attackers have taken over cloud-hosted ScreenConnect panels and used them to push a custom toolkit called SCKit to at least ...
In my previous free article, I wrote about my experience connecting xAI's Grok and Google's Gemini to Meta's personal AI, ...
Attackers abuse ScreenConnect access to deploy SCKit malware, targeting at least 288 endpoints across 48 organizations.
Attackers deployed SCKit, a malicious toolkit with worm-like propagation capabilities, across at least 288 endpoints ...
AntiFox-linked intrusions used IIS web shells and valid AWS credentials to enumerate cloud services and access production ...
ROMULUS platform uses ClickFix traps, PowerShell scripts and fake installers to deliver malware and infect Windows systems.
Unauthorized AI relays reroute Codex and Claude Code traffic, disable sandboxing, and expose prompts, files, credentials, and API secrets ...