New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

Storm-2561 spreads fake VPN installers via SEO poisoning and GitHub downloads, stealing enterprise VPN credentials with Hyrax malware.

New York could ban credit scores, zip codes, and income as auto insurance rating factors under a bill introduced on March 6, ...

Storm-2561 uses SEO poisoning to push fake VPN downloads that install signed trojans and steal VPN credentials. Active since 2025, Storm-2561 mimics trusted brands and abuses legitimate services. This ...

You can plug in your phone, download an emulator, or install the Google Play Store to access Android apps on your computer. Some tinkering may be required.

Hackers can change a single byte to insert malware undetected, posing as an apparently corrupted ZIP file dubbed Zombie Zip. A security researcher demonstrated this by tricking Windows Defender and ...

Early Windows had big gaps. These four open-source apps stepped in and solved problems Microsoft left unsolved.

The Efimer malware campaign is hijacking Google SEO to drain the crypto wallets of Oscar fans hunting for free movies, Cybernews researchers found.

BlackSanta is a malware module that kills EDR and AV at the kernel level prior to unleashing the malware’s final purpose.

A Geographic Targeting Order will require transfer companies to notify law enforcement of large remittances in an effort to combat money laundering by Mexico-based cartels.