Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell.
They made using PowerShell effortless.
Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with ...
Hackers disguise PowerShell scripts as JPEG files to bypass Windows security and deploy remote access trojans through Operation SilentCanvas attacks.
CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization ...
Tiny11 can help older Windows 10 PCs run a lighter Windows 11 build, but the unofficial project comes with security and ...
CVE-2026-5426 enabled KnowledgeDeliver LMS attacks before February 24, 2026, leading to Cobalt Strike infections.
A new variant of the 'SHub' macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor ...
A multi-stage attack on Linux devices began with an exposed F5 BIG-IP edge appliance and pivoted to an internal Confluence ...
Another Linux kernel flaw has handed local unprivileged users a way to peek at files they should never be able to read, ...
A new infostealer variant targets macOS users by spoofing Apple, Microsoft, and Google and then then gets to work searching ...
BlueNoroff hackers used fake Zoom calls, ClickFix prompts, and fileless PowerShell malware to steal credentials from Web3 and crypto targets.