Two critical remote code execution (RCE) flaws dubbed "PHP2Shell" have hit the core PHP programming language, triggering ...
Deception is moving at machine speed. Learn to keep pace. Huntress investigated multiple incidents stemming from an Amazon-themed ClickFix campaign tied to a sponsored Google search result for the ...
Russia’s GRU hacked a NATO naval shipbuilder, aircraft engine manufacturer, and law enforcement agency using HOOKEDGE, a ...
FortiGuard Labs has documented an August 2026 Casbaneiro campaign against users in Latin America. It uses a geofenced, ...
Casbaneiro malware is hiding its main command and control traffic until an infected user visits a targeted banking website.
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware. The ...
Microsoft has warned of ClickFix attacks using BNB Chain smart contracts to infect thousands of devices every day. According to Microsoft Threat Intelligence, a cluster of compromised websites has ...
The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...
A surge in attacks exploiting iCalendar (.ics) files as a sophisticated threat vector that bypasses traditional email security defenses. These attacks leverage the trusted, plain-text nature of ...