The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...

Citrix NetScaler CVE-2026-88772 is exploited in the wild and can enable remote code execution through a DTLS buffer overflow.

BlackX bootkit bypasses Windows Secure Boot to deploy espionage malware against Central Asian diplomats, with suspected APT41 ...

A very significant change is occurring in the world of AI Agents.Until now, when people heard the word "Skill," many likely ...

Hackers abuse VLC and VMware components to sideload malware onto Windows systems through phishing campaigns targeting Brazil ...

A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere ...

Kaspersky's GReAT team has detailed Operation FlashHole, a Lazarus espionage campaign active since at least July 2025 that ...

WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access campaign targeting users in Portugal.

A malicious npm package called imgdecode hides malware inside image files hosted on GitHub. Security researchers at SafeDep ...

North Korean hackers linked to the Lazarus Group abused banking security software to deploy a layered malware toolkit against ...

For this project, you need rust nightly v0.100.0 with target triple x86_64-pc-windows-gnu. The project has only been compiled on Linux, so I would advise you use Linux. If you want to modify the LLVM ...

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler ...