Cybercriminals are leveraging weaponized LNK files and PowerShell scripts to deliver NarwhalRAT, a remote access trojan capable of extensive system compromise. The attack chain begins with malicious shortcut files that trigger PowerShell commands, ultimately deploying a Python-based loader to establ
Security researchers have uncovered a sophisticated adware network comprising 152 malicious Chrome extensions disguised as wallpaper customization tools. With over 105,000 combined installations, these extensions injected unwanted advertisements, generated fake traffic, and potentially harvested use
A critical vulnerability in Wazuh, the popular open-source security monitoring platform, allows authenticated attackers to manipulate security alerts and permanently delete forensic evidence. The flaw undermines the integrity of security operations by enabling threat actors to cover their tracks aft
Security researchers have discovered more than 50 malicious Android applications distributing the MagicAd trojan through official app stores, including Google Play. These seemingly legitimate apps—ranging from utilities to productivity tools—have collectively amassed millions of downloads. MagicAd o
Microsoft’s Windows 11 update KB5094126 is causing widespread system instability, including complete system freezes, infinite BitLocker recovery loops, and boot failures. Users across multiple Windows 11 versions report being locked out of their systems, with some requiring full reinstallation. Micr
A sophisticated scam campaign dubbed “Sniper Dz” is actively targeting users across the Middle East and North Africa (MENA) region through deceptive Facebook advertisements and fake prize offers. The operation leverages social engineering tactics, fraudulent browser notifications, and phishing pages
The Gentlemen ransomware operation has compromised 483 organizations across nine months, leveraging a sophisticated multi-pronged attack strategy combining infostealer malware, AI-powered reconnaissance, and an unprecedented 90% profit-sharing model with affiliates. This aggressive newcomer demonstr
Attackers are reviving the Evil MSI (Microsoft Installer) technique, leveraging BASE64 encoding and statistical obfuscation to bypass detection mechanisms. This campaign exploits Windows Installer’s legitimate functionality to execute malicious payloads while evading traditional signature-based secu
Cybercriminals have developed a sophisticated malware distribution campaign embedding the newly discovered Argamal malware within fully functional adult-themed video games. Unlike typical trojanized software that fails to deliver promised functionality, these games work as advertised while silently
Recent testing reveals that large language models (LLMs) consistently fail to validate factual accuracy, accepting completely fabricated data as legitimate input. Despite advanced prompting techniques, AI models demonstrate they’re fundamentally code-based systems with inherent limitations that cann