A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal ...

The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted ...

CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.

Attackers are exploiting trust in Adobe’s brand to deliver covert remote access, using a fake Acrobat Reader download page to install ConnectWise ScreenConnect through a fileless, memory-heavy attack ...

MSBuild, a legitimate Microsoft build tool embedded in many Windows and developer environments, is drawing renewed scrutiny after fresh threat research showed how attackers are using it to run ...

A security researcher published details of three security vulnerabilities in Windows Defender, and the code used to exploit ...

Threat actors are exploiting three recently disclosed Windows security vulnerabilities in attacks aimed at gaining SYSTEM or ...

A security researcher has published a working exploit for a Microsoft Defender security flaw that affects Windows 10, 11, and ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

Now shipping in the VS Code Insiders build, Microsoft's new Visual Studio Code Agents preview offers an early look at a separate companion app for agent sessions, approvals, workspace discovery, and ...

Stay ahead of the logs with our Monday Recap. We break down active Adobe 0-days, North Korean crypto stings, and critical CVEs you need to patch today ...

Microsoft assigned CVE-2026-21520 to a Copilot Studio prompt injection vulnerability and patched it in January — but in ...