From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
A single pipeline replaced fourteen lines and I never looked back.
Essential Tips to Run PowerShell Scripts Like a Pro PowerShell has evolved into a powerful scripting language that’s essential for system administrators and IT professionals alike. Whether you’re ...
A PowerShell script included in patch files appears to be triggering false positives by multiple security engines.
Rob LeFebvre is an editor and writer focusing on consumer and enterprise technologies for a broad range of outlets. He’s been writing online for more than 15 years; before that he was a special ...
Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, ...
PowerShell cross-platform limitations break Windows-only cmdlets, .NET dependencies, and Windows Forms GUIs on Linux. Dual booting and WinBoat enable Windows PowerShell compatibility but introduce ...
Fake movie torrents deliver multi-stage malware without the user noticing execution steps AgentTesla steals browser, email, FTP, and VPN credentials silently and efficiently Malicious PowerShell ...
After noticing a spike in detections involving what looked like a movie torrent for One Battle After Another, Bitdefender researchers started an investigation and discovered that it was a complex ...
Windows Sandbox was launched by the end of 2018 with Windows 10 version 1903. The idea was to provide an isolated and temporary virtual PC environment where you can install suspicious software or open ...
Attackers use fake Fortinet dialogs and social engineering to trick users into executing malware Cache smuggling hides malware in browser cache, bypassing download and PowerShell detection tools ...
In February 2025, we discovered that the Gamaredon tool PteroGraphin was used to restart Turla’s Kazuar backdoor on a machine in Ukraine. In April and June 2025, we detected that Kazuar v2 was ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results