NodeStealer now steals data and adds keylogging, clipboard monitoring, and screen capture, expanding into full surveillance.

Living-off-the-land binaries, often shortened to LOLBins, are legitimate Windows executables that attackers abuse to carry out malicious activity while blending in with normal administration. The ...

This week’s ThreatsDay Bulletin tracks fake IT calls, abused remote tools, phishing kits, unsafe downloads, ransomware, ...

AMSTERDAM and SAN FRANCISCO, September 3, 2026 — LucidLink, the Emmy-winning cloud-native file streaming platform for instant, secure access to large files, today announced the next step in its vision ...

Experts got Claude to port a PLC exploit, but it cost $536 and 8 hours, and a later AI-generated payload accidentally ...

Microsoft is warning that a campaign using fake human-verification prompts can turn a user's Windows computer into an entry point for attackers to reach an organization's internal network .

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an ...

Fire Ant compromises Cisco routers to spy on traffic, hide activity, and move toward high-value systems across networks.

CISA advisory AA26-231A is the first U.S. government alert to publicly confirm that AI-generated exploitation scripts are ...

Alleged Chinese-speaking actor breached Philippine nuclear and naval targets by exploiting known flaws, stealing sensitive ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

Or, why every Android enthusiast should try Termux at least once ...