Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...

I keep these three portable Windows apps on a USB drive so I can use my favorite software on other PCs without installing ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

Latrodectus is a Windows loader that downloads other malware, seen in phishing and ClickFix attacks. See what it does, how to ...

This is the first thing you should do when you get the NTOSKRNL.exe BSOD error on your computer. Since this is a hardware- and driver-related issue, you can try to ...

The Node.js I thought I had updated was actually still running an old version. The cause was that there were three versions ...

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ...

North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.

ClearFake hides on hacked websites and shows fake browser updates or fake CAPTCHA checks that install stealers. See how it ...

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

A breakdown of the Switch 2 jailbreak ns2jb, comparing the researcher's technical write-up with the released README. It ...

Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.