From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Spirals ransomware can encrypt a network in under 24 hours. See how it uses IIS access, Windows tools, and double extortion ...

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in ...

Microsoft's July 14 Patch Tuesday delivered something more significant than the usual batch of security fixes: a quiet rewriting of how Windows negotiates encrypted connections. The update ships ...

Windows administrators face a hard, irreversible deadline in three days: when July 14's cumulative update installs, Microsoft permanently removes the registry key that allowed domain controllers to ...

A newly identified destructive Windows backdoor combines ransomware-like encryption with multiple data-wiping features, ...

The GigaWiper backdoor combines several malware families and can sabotage systems using a wiper, encryption, and wiping ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

The modular Golang backdoor combines remote administration, multiple disk-wiping logics, and a Crucio-derived ransomware ...

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...