Автор: Nate Nelson, Contributing Writer

For three years now, more than a thousand social media accounts have been reposting the same pro-India, anti-Pakistan content on Facebook and X.

DPRK’s innovative tack chains together previously unknown browser issues, then adds a rootkit to the mix to gain deep system access.

Malware authors have iterated on one of the premier encryptors on the market, building something even bigger and better.

The global Internet helps just about everything to scale more easily, including piracy and ad fraud.

The most popular office software suite in China actually has two critical vulnerabilities, which allowed hackers the opportunity for remote code execution. Time to patch.

LLM automation tools and vector databases can be rife with sensitive data — and vulnerable to pilfering.

A threat actor resembling APT41 performed "AppDomainManager Injection," which is like DLL sideloading, but arguably easier and stealthier.

The disclosure of CVE-2024-28987 means that, in two weeks, there have been two critical bugs and corresponding patches for SolarWinds’ less-often-discussed IT help desk software.

Ironically, Macs’ lower risk profile may make them more susceptible to any given threat than the average Windows or Linux system.

Analysts have been picking up increased cases of malware delivery via Windows Installer files in Southeast Asia.