Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

This article is a record of a reproduction experiment in which generative AI agents were tasked with extensively and autonomously executing game development for Roblox. It comprehensively records and ...

ConclusionEven if the syntax is correct, it is safer not to execute PowerShell scripts created by AI directly on production ...

IntroductionIn August 2026, Zscaler ThreatLabz observed new activity by the Pakistan-nexus threat actor APT36 in a campaign we’re tracking as Operation RapidRust. Since our last publication about the ...

SloppyRAT uses ClickFix to help ransomware attackers gain access, gather data, and spread across compromised networks.

If you want a full-fledged NAS, the Synology BeeStation Plus 8 TB is not for you. But if all you want is simple network ...

Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...

Windows 11 hides a registry trick that lets your profile picture stay animated as a GIF, and here's exactly how to enable it yourself.

Microsoft Teams phishing is again being used as a doorway to deliver a malware family called SynkLoader. The campaign relies on a familiar social-engineering trick: an attacker poses as an IT helpdesk ...