Password-protected files are an intelligent way in which attackers are working to evade enterprise security defenses and infect endpoints. Not long ago, phishing attacks were nearly always delivered ...

Cybersecurity researchers have identified a new malware campaign that is reportedly targeting WhatsApp users through ...

The security industry has been highlighting the cybercriminal misuse of HTML for years — and evidence suggests it remains a successful and popular attack tool. Last year we reported that around one-in ...

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with malware hidden inside dependency folders. The malicious activity was ...

Japan's computer emergency response team (JPCERT) is sharing a new 'MalDoc in PDF' attack detected in July 2023 that bypasses detection by embedding malicious Word files into PDFs. The file sampled by ...

Microsoft Teams is adding two new security features to protect users against malicious links and dangerous files. Starting next month, the messaging app will be able to “detect and warn users [about] ...

Microsoft is improving protection against malicious files and links in Microsoft Teams, a problem that has been growing lately. According to a Microsoft 365 Message Center alert, users will start ...

UPDATE: Google’s spokesperson reached out with an update for this. This is what he said: “Based on our current detection, no apps containing this malware are found on Google Play. Android users have ...

Hugging Face, the primary online repository for generative AI, has hosted thousands of files containing hidden code that can poison data and steal information, including the tokens used to pay AI and ...

Threat actors are increasingly creating malicious virtual hard drives to distribute malware, in the hopes of getting around email gateways that have become good at detecting infected documents, ...