Microsoft rolls out Model Context Protocol support in Windows ML, providing tools to build agentic Windows applications that ...
New ClickFix attack variants have been observed where threat actors trick users with a realistic-looking Windows Update ...
ClickFix has become hugely successful as it relies on a simple yet effective method, which is to entice a user into infecting ...
Tsundere botnet spreads via MSI and PowerShell installers, using Ethereum-based C2 rotation and game-themed lures to target ...
China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage ...
The China-based cyber-threat group has been using malicious extensions on the Google Chrome and Microsoft Edge marketplaces ...
North Korea-linked Contagious Interview campaign is now luring developers with trojanized coding tasks and pulling obfuscated payloads from public JSON-storage services like JSON Keeper, JSONSilo, and ...
Native Windows apps used to be fast, efficient, and everywhere. Now, it's all just a website in a Chromium wrapper.
Chrome has suffered two other confirmed zero days in the V8 engine in 2025, from a tally of seven across Chrome as a whole. The V8 flaws were CVE-2025-5419 in June and CVE-2025-10585 in September.
The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a ...
Social engineering attacks are probably still among the most used ways to actually infect a computer or steal someone's data.
A new ClickFix variant ratchets up the psychological pressure to 100 and addresses some technical mitigations to classic ClickFix attacks.