In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Gamaredon hacking group escalated its decade-long espionage campaign against Ukraine in 2025, exploiting a weaponized WinRAR vulnerability, CVE-2025-8088, to deploy destructive wiper malware for the ...

Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign codenamed CryptoBandits that has targeted users since February 2026 with clipboard-intercepting malware with ...

Microsoft Threat Intelligence and Microsoft Defender Experts identified a Windows-based cryptocurrency clipper that has affected users since February of 2026. Clipper malware relies on stealing ...

The CloudZ Trojan steals data through Microsoft Phone Link. The campaign has been active since at least January 2026. Follow our practices to protect yourself from the CloudZ Trojan. Cisco Talos ...

Many organisations are turning to virtualisation of apps and desktops. This often involves virtualisation platforms such as Citrix to deliver these services. Get your configuration or lock-down wrong ...

North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance. The malicious ...

A cyber espionage group linked to North Korea has been observed deploying a new malicious campaign using removable media infection tools to gain access to air-gapped systems. The group, APT37, is well ...

BootThatISO! is an innovative Windows tool that allows booting operating systems from ISO files without needing a USB drive. Ideal for situations where you don't have a USB device handy, such as ...

When you convert the ESD file to a WIM file in the Windows source, you can integrate updates and drivers using a process called Slipstream, with the original setup disk to service the image or deploy ...