Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...

Latrodectus is a Windows loader that downloads other malware, seen in phishing and ClickFix attacks. See what it does, how to ...

I keep these three portable Windows apps on a USB drive so I can use my favorite software on other PCs without installing ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

This is the first thing you should do when you get the NTOSKRNL.exe BSOD error on your computer. Since this is a hardware- and driver-related issue, you can try to ...

The Node.js I thought I had updated was actually still running an old version. The cause was that there were three versions ...

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ...

North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.

A breakdown of the Switch 2 jailbreak ns2jb, comparing the researcher's technical write-up with the released README. It ...

ClearFake hides on hacked websites and shows fake browser updates or fake CAPTCHA checks that install stealers. See how it ...

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.