MicrosoftのWindows 11向けAI機能「Recall」を巡り、セキュリティ研究者のアレックス・ハーゲナ氏が、ユーザーの認証後にRecallの保存データを取得できるツール「TotalRecall ...

Unknown attackers compromised the CPUID website, redirecting users to malware laden versions of popular tools.

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

Phishing surge, LinkedIn tracking claims, spyware use, and rising stealers expose growing abuse of trusted systems.

Hackers are exploiting Anthropic's accidental Claude Code source leak to distribute Vidar and GhostSocks malware through fake ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how quickly a compromised package can propagate through the ecosystem.

DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.