ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named ...

An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed ...

Trojanized npm packages launch RedC2 4.0 on Linux at import time, giving operators shell access, credential theft, and ...

The latest Google Chrome update fixes 4 new non-exploited critical memory vulnerabilities. Here’s what they are and why the increasing volume of updates is a good thing.

CISA says attackers are exploiting a critical 2025 vulnerability in Ray, the widely used open source framework for scaling Python and machine-learning workloads. Tracked as CVE-2025-62593 and rated 9.

Android modem exploit disclosed August 17: answering a video call can hand a remote attacker complete kernel control of any budget Android phone running a Unisoc chipset. No patch exists for either ...

IntroductionIn July 2026, Zscaler ThreatLabz identified a new Rust-based malware family that we track as C2Looper, which is ...

Hollowframe Masks Malware Behind Trusted Python Files Arabian Post. clearfix>A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of ...

Security researchers have identified a new malware loader, dubbed WordlistLoader, used in ClearFake campaigns to deliver the ...