When Microsoft patched a vulnerability last summer that allowed threat actors to use Windows’ shortcut (.lnk) files in exploits, defenders might have hoped use of this tactic would decline. They were ...

IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...

If Microsoft 365 deployment tool is not working properly, and you see We couldn't find the specified configuration file, ...

Check Point research found three critical flaws in Anthropic's Claude Code that allow attackers to execute arbitrary commands ...

Hackers are hijacking email accounts and sending fake invites that install remote access tools. Even your antivirus may not ...

Execution, integrity, and provenance determine PDF safety.

Say goodbye to sluggish thumbnail generation with this open-source solution for Windows users.

A convincing lookalike of the popular Huorong Security antivirus has been used to deliver ValleyRAT, a sophisticated Remote ...

AI agents now operate across enterprise systems, creating new risk via prompt injection, plugins, and persistent memory. Here ...

This process is called a clean install, which is ironic as there's nothing particularly clean about it: Microsoft has enshittified Windows Setup.

CRESCENTHARVEST uses protest lures and malicious LNK files to deploy RAT malware targeting Iran protest supporters for espionage and data theft.