CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

An Argo CD vulnerability allows API tokens with even low project-level get permissions to access API endpoints and retrieve all repository credentials associated with the project.

Learn how AI-driven APIs reshape threat models and discover actionable security practices to protect data and prevent ...

GhostRedirector compromised 65 Windows servers since Aug 2024 using Rungan and Gamshen malware, driving SEO fraud.

Emoji 16.0 update has landed in Windows 11, with new icons like Fingerprint and Shovel, but the absence in Emoji Panel leaves ...

Overview On September 10, NSFOCUS CERT detected that Microsoft released the September Security Update patch, fixing 86 security issues involving widely used products such as Windows, Microsoft Office, ...

AttackIQ has updated the assessment template that emulates the various post-compromise Tactics, Techniques, and Procedures ...

Our expert, award-winning staff selects the products we cover and rigorously researches and tests our top picks. If you buy through our links, we may get a commission. Attila covers software, apps and ...