Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...

This is the first thing you should do when you get the NTOSKRNL.exe BSOD error on your computer. Since this is a hardware- and driver-related issue, you can try to ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

XWorm is a remote access trojan for Windows sold to criminals. See what it can take, how it gets in, what abuse.ch shows in ...

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ...

The Node.js I thought I had updated was actually still running an old version. The cause was that there were three versions ...

That old Java icon had a much bigger résumé than I gave it credit for.

ClearFake hides on hacked websites and shows fake browser updates or fake CAPTCHA checks that install stealers. See how it ...

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.

A PDF that arrives from outside the building is, as far as the parser is concerned, a program some stranger wrote. Inside ...

Kaspersky's GReAT team has detailed Operation FlashHole, a Lazarus espionage campaign active since at least July 2025 that ...