GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.

Antino backdoor abuses Microsoft 365, using Outlook and OneDrive for C2, data theft and persistent access to Windows systems.

Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.

ElectrumSVP 0.2.0 brings stronger seed security, local transaction verification, fee upgrades, and a roadmap for cold wallets and privacy tools.

China-nexus UAT-11587 targets Asian government and policy groups with Antino, a Rust backdoor that uses Microsoft 365 for C2.

Cisco Talos has uncovered a China-nexus cyber-espionage campaign that compromised approximately 350 endpoints across eight ...

Attackers exploited two PaperCut zero-day vulnerabilities to deploy AdaptixC2 malware and compromise an education organization’s ...

Update WSL, type one command, and you're good to go.

Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month.