Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.

How MSSPs can improve threat hunting against ransomware with stronger visibility, faster detection, and proactive defense across client environments.

Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix tactics to steal access and spread malware.

Welcome to this new Medium post, in this one we will see how to steal plaintext Windows credentials at the logon screen by abusing the…

Malware is one of the biggest challenges in cybersecurity. From ransomware and spyware to trojans and information stealers, malicious…

At a Glance Malware Family PEERSTITCH malware (64-bit Linux ARM64 in-memory process injector) Threat Actor Confirmed as cluster CL-STA-0954 (tracked by Mandiant as UNC5820); suspected nation-state…

At a Glance Malware / Tool Family CodeAudit AI extension (intrusive IDE telemetry and data harvester) Threat Actor Unattributed (Published under the name Tejas Kulkarni; intent unconfirmed) Target…

XWorm has crossed a critical threshold where a conventional Remote Access Trojan (RAT) begins operating like a comprehensive pocket surveillance suite. Recently, Netskope Threat Labs identified fo…

At a Glance Malware / Campaign Family Browser-based WatchGuard VPN phishing kit (popup.js credential harvester; no endpoint malware) Threat Actor Suspected overlap with Storm-2561 (financially mot…

Anthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI worms targeting connected devices.