A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...

Proofpoint says UNK_DeadDrop sent 250+ phishing emails to nearly 100 firms, using GitHub and VS Code lures to steal ...

Bitdefender security researchers have discovered that attackers continue to exploit Microsoft HTML Application Host (MSHTA), a legacy utility available by default on Windows systems that can execute ...

Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and persistent malware through phishing, fake software downloads, and LOLBIN-based ...

If you are setting up a new PC with Windows 11 version 24H2 (2024 Update) or later, developers may not find the VBScript installed after installation, as Microsoft does not install it by default now.

Recent social engineering schemes involving WordPress and Microsoft’s Windows Terminal show that this relatively basic tactic is a growing threat. Cybercriminals are combining compromised websites ...

This is the collection of the Javascript / JScript extensions and standalone scripts. It consists of the original scripts by myself and other authors with proper credits. Years ago I invented a simple ...

This Intune policy is designed to enhance endpoint security by preventing JavaScript and VBScript from automatically launching executable files that users download. These scripting languages, while ...

A newly identified loader dubbed “Caminho” (Portuguese for “path”) has emerged as a sophisticated Loader-as-a-Service platform that uses Least Significant Bit (LSB) steganography to conceal malicious ...

PDF files have become a staple of our daily digital lives, both at work and at home. They work seamlessly across operating systems and devices, and they couldn’t be easier to create and share. Every ...

WTF?! It's an email scam as old as the Nigerian prince asking for money: someone claiming they hacked your webcam and have recorded you in an act of self-pleasure. Unless you pay up, the video will be ...

An ongoing malware campaign active throughout 2025 is using malvertising to deliver a sophisticated PowerShell-based framework. According to Cisco Talos researchers, the malware is named “PS1Bot” due ...