On October 12, 2026, AWS announced "AWS Lambda Web Functions." This is a new execution model that allows standard Node.js web ...

Deception is moving at machine speed. Learn to keep pace. Huntress investigated multiple incidents stemming from an Amazon-themed ClickFix campaign tied to a sponsored Google search result for the ...

Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.

From yesterday through today, IT professionals and website operators around the world have been dealing with one of the most ...

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware.

Consumers searching for ChatGPT need to pay particularly close attention to where their clicks take them. Security researchers have uncovered a malware campaign that impersonates ChatGPT and exploits ...

That old Java icon had a much bigger résumé than I gave it credit for.

Attackers are using UpdraftCentral keys stolen in the TeamUpdraft breach to install WordPress backdoors. No plugin update ...

CastleStealer upgrades target Windows users, bypassing browser encryption, executing remote commands and stealing sensitive data.

Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands.

When a cyber incident occurs, one of the first challenges is understanding what happened, which systems were involved, and what traces were left behind. In this context, Velociraptor is an open-source ...

Summoning the penguin has never been easier ...