Your weekly cybersecurity roundup covering the latest threats, exploits, vulnerabilities, and security news you need to know.
A new ClickFix attack variant uses fake CAPTCHA pages instructing victims to paste and execute malicious commands in Windows Terminal.
Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users ...
Sophie Koonin discusses the realities of large-scale technical migrations, using Monzo’s shift to TypeScript as a roadmap.
Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor.
InstallFix delivers an infostealer to your device.
Unwitting victims are now being tricked into installing malware via Windows Terminal, but some experts say this is old news.
A threat actor has found a new way to evade phishing detection defenses: Manipulate the .arpa top-level domain (TLD) and IPv6-to-IPv4 tunneling to host phishing content on domains that shouldn’t ...