IT professionals and decision-makers from across the Microsoft ecosystem gathered at m365con to examine real-world challenges ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

Augmented Marauder targets Latin America and Europe since 2020, using dynamic PDF phishing to spread Casbaneiro via Horabot.

The massive amount of junk code that hides the malware's logic from security scans was almost certainly generated by AI, ...

Discover how virtual desktops in Windows 11 can transform your work and personal life, creating dedicated spaces for each ...

The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a ...

Microsoft’s CA-2023 Secure Boot update broke PCs. Learn why UEFI firmware failed, how vendors reacted, and how to fix your boot issues.

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.

Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, ...

A prolific ransomware group has been exploiting a zero-day vulnerability in a Cisco firewall product since January, according ...