CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

ESET researchers have identified a new threat actor targeting Windows servers with a passive C++ backdoor and a malicious IIS ...

GhostRedirector compromised 65 Windows servers since Aug 2024 using Rungan and Gamshen malware, driving SEO fraud.

Vidar is powered by a PowerShell script that can steal data from a remote server through the use of stealth techniques such ...

AttackIQ has updated the assessment template that emulates the various post-compromise Tactics, Techniques, and Procedures ...

WhatsApp flaw exploited in targeted spyware attacks, Microsoft mandates Azure MFA, Nissan hit by Qilin ransomware, Baltimore loses $1.5M in fraud, and FreePBX CVSS 10 flaw under attack.