IntroductionIn February 2022, BlackBasta emerged as a successor to Conti ransomware and quickly rose to prominence. BlackBasta was operational for three years until February 2025 when their internal ...

New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.

Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installer ...

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.

This Windows 11 24H2 update download could quietly compromise your system and steal sensitive personal data, putting your system's privacy and security at serious risk.

Diffie-Hellman’s key-exchange method runs this kind of exponentiation protocol, with all the operations conducted in this way ...

A group of hackers used both Claude Code and ChatGPT in a cybersecurity hack that lasted two and a half months.

Officially, we don't know what France's forthcoming Linux desktop will look like, but this is what my sources and experience ...

The OpenTelemetry project has announced that key portions of its declarative configuration specification have reached stable ...

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.