Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

Some are bare-bones kits. Others are ready to go out of the box, complete with an operating system, RAM, and memory installed ...

The Mac-jealous Windows-faithful: This is the mini desktop to buy for a Mac mini-like hardware experience with Windows software. Geekom took deep care in its hardware design to deliver a product as ...

Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of espionage-focused ...

Cybersecurity researchers are sounding the alarm about what has been described as "malicious activity" in newly published versions of node-ipc. node-ipc@9.1.6 node-ipc@9.2.3 node-ipc@12.0.1 "Early ...

Coding-worker MCP for Codex Desktop. Codex plans, delegates, and reviews; DeepSeek V4 does the expensive code reading, editing, and checking through Claude Code. Goal: save Codex main-thread tokens, ...

TL;DR Our telemetry indicates an active exploitation campaign targeting vulnerable Windows Server Update Services (WSUS) systems via CVE-2025-59287 (CVSS 9.8 – Critical). This document summarizes the ...

Just days after Microsoft killed security updates for 500 million Windows 10 users, there’s bad news for Windows 11 users as well. A new, mandatory security update is a “total disaster” and an ...

Microsoft confirmed that Windows 11 KB5066835 breaks localhost (127.0.0.1) HTTP/2 connections, which means locally hosted apps can no longer connect to your network, but that’s not the only problem.

This blogpost introduces our latest white paper, presented at Virus Bulletin 2025, where we detail the operations of the North Korea-aligned threat actor we call DeceptiveDevelopment and its ...