PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...

Apple today released a new update for Safari Technology Preview, the experimental browser that was first introduced in March ...

Researchers found attackers using fake CAPTCHA pages. Users should never run PowerShell or Windows commands requested by ...

The latest email threats: real Microsoft login phishing, device code scams with a kill switch, split-click attacks, and the ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

Fortinet says the Ousaban trojan uses geofenced phishing PDFs and steganography to steal banking credentials from users in Spain and Portugal.

Microsoft says these 119 malicious extensions were downloaded a total of 2.6 million times since 2021.

Kage can package entire websites into single files ...

Fortinet says the May 2026 Ousaban campaign uses PDF lures, geofencing, and steganography to target Windows banking users.

If you're considering PuppeteerSharp for PDF generation, here's the version of the story that doesn't show up in the "getting started" docs.

Installing a piece of code from NPM will no longer auto-run malware on the system, and won’t quietly pull malicious code from external repos unless the developer explicitly allows it. But this won’t ...