The AhnLab Security Intelligence Center (ASEC) has identified a phishing campaign that uses fake purchase order requests to ...
SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR hunting.
Hackers use fake purchase order emails and malicious Word documents to spread XLoader malware and steal browser data.
Living-off-the-land binaries, often shortened to LOLBins, are legitimate Windows tools that attackers abuse to execute commands, download payloads, move laterally, or hide activity inside normal ...
ClickFix attacks hide malware in PNG images and fake verification prompts, enabling credential theft and corporate network breaches.
I had Claude (Fable 5.2) audit my entire home lab, and it found two .exe files pretending to be movies and one 1.1GB .lnk ...
Support for .NET 8 and .NET 9, as well as PowerShell 7.4 and 7.5 running on them, will end on November 10, 2026 (US time; the ...
Learn how “Living off the Land” attacks work and how EDR, XDR, SIEM, UEBA, and Zero Trust help detect anomalous behavior.
Attackers targeted Qlik Sense servers with blocked PowerShell reverse shell attempts, using infrastructure hosting backdoors and exploits.
Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs.
SCKit exploits patched ScreenConnect flaw CVE-2026-84869 and attempts to hijack technician sessions to spread across managed endpoints.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results