Cybercriminals are increasingly hijacking Node.js, the widely used JavaScript runtime, to slip malicious code past security defenses.

Attackers abuse Node.js to execute malicious scripts and deploy payloads in attacks targeting governments, technology ...

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

A Florida man convicted of fatally shooting a 16-year-old girl who rejected his romantic advances and wounding two of her ...

Microsoft is warning that a campaign using fake human-verification prompts can turn a user's Windows computer into an entry point for attackers to reach an organization's internal network .

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

MuddyWater-linked threat actors are using a backdoor named Dindoor that abuses the legitimate Deno runtime to execute ...

Threat actors are increasingly turning legitimate software into part of their attack chains. Instead of deploying an obviously malicious executable, attackers can abuse trusted tools that already have ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

The Anti-Cheat Not Installed message stops Delta Force before its game window opens. Steam can still show the game as fully ...

Cybercriminals are distributing fake pirated copies of “The Odyssey” to infect Windows users with Lumma Stealer malware. The malicious downloads may contain no movie footage at all, relying instead on ...