A kernel-mode framework called XMemGuard enforces a cross-process write-XOR-execute principle on Windows, detecting all 33 ...
The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into dllhost.exe.
StingyBasilisk spies on isolated networks using Windows named pipes and SMB to secretly spread malware across systems.
Behind the fact that attackers focus intensively on specific platforms lies a highly systematized 'economic rationality (cost ...
ClickFix attacks hide malware in PNG images and fake verification prompts, enabling credential theft and corporate network breaches.
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability ...
The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results