Citrus ransomware abuses Windows Group Policy to disable Microsoft Defender and spread malware across entire corporate ...

Attackers abuse ScreenConnect access to deploy SCKit malware, targeting at least 288 endpoints across 48 organizations.

How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...

A 3 AM (ThreeAM) ransomware affiliate breached a UK school estate and encrypted about 37 systems. Bitdefender describes the ...

A 3AM ransomware affiliate targeted a school estate in the UK and successfully encrypted around 37 of nearly 50 machines reached from an unmanaged host. Researchers at cybersecurity company ...

Full disk encryption comes down to four serious choices in late 2026: BitLocker on Windows, LUKS2 on Linux, FileVault on macOS, and VeraCrypt when one tool has to span every platform. The newest ...

Hackers use fake Colombian court notices to trick organizations into installing XWorm, a remote access tool that enables PC takeover.

Project Zenith sounds really cool, but you need a special PC to run it.

Russia’s GRU hacked a NATO naval shipbuilder, aircraft engine manufacturer, and law enforcement agency using HOOKEDGE, a backdoor that routes spy commands through an invisible 1-pixel Microsoft Edge ...

ROMULUS uses ClickFix lures and PowerShell scripts to deliver malware, including Legion Loader, across infrastructure spanning six IP addresses.

Signal phishing attacks by Russian intelligence have now been formally confirmed in five NATO countries after the Czech Republic’s NUKIB issued an advisory on October 13, 2026, making it the fifth ...

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into executing malicious PowerShell commands in Windows Terminal. Unlike typical ...