Hackers are hijacking ScreenConnect, a tool that many IT companies use to manage their clients’ computers remotely. The ...

Attackers have taken over cloud-hosted ScreenConnect panels and used them to push a custom toolkit called SCKit to at least ...

Citrus ransomware abuses Windows Group Policy to disable Microsoft Defender and spread malware across entire corporate ...

Attackers used AI to revive a blocked attack on a US retailer, generating error-free scripts that enabled rapid lateral movement.

ARTEX AI Agents Enable Rapid Automated Network Break-ins** Criminals and state-linked groups exploit the open-source ARTEX AI agents to automate mapping and credential theft on Windows networks.

Deception is moving at machine speed. Learn to keep pace. Adversary Tactics documents, makes sense of, and informs the broader community about interesting threats that surface from our SOC. Here are ...

Turn Firefox 159 into a Firefox privacy browser in 12 steps: user.js, policies.json, DNS over HTTPS, fingerprinting and a ...

Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and ...

In the autumn of 2026, a cyberattack on the GMO Internet Group shook Japan's IT and financial sectors.It was an unprecedented ...

Why can connecting to the cloud reach your home C drive?*This article is based on information available as of October 27, 2026. Facts confirmed by official GMO announcements, general technical ...

Fake ChatGPT and Claude desktop apps on GitHub use signed OpenAI and Anthropic executables to load Yoba malware and a cryptominer.