PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...

Securonix says PureLogs infection starts with a fake PDF JavaScript file and uses PowerShell, fileless .NET loading, and LOLBins.

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

Opera has rolled out Paste Protect, a built-in browser defence designed to stop malicious clipboard commands before users can paste them into terminals, run boxes or other command-line tools. The ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

Criminals are exploiting traffic distribution systems to silently redirect users to fraudulent sites, and the FBI says the ...

A wave of phishing emails sent to Booking.com partner accommodations in Japan in May led to blockchain-hosted malware ...

Dave Plummer rebuilt Notepad in 2.5KB using only what Windows already ships, exposing how bloated Windows 11's own Notepad ...

The offices of Google are pictured in London on February 28, 2026. JUSTIN TALLIS/AFP via Getty Images Google released agents-cli on April 21, 2026, and it has shipped 13 updates in the 71 days since — ...