Hackers are using fake Steam troubleshooting replies and PowerShell commands to install XMRig miners on Windows PCs.

Steam warns Meccha Chameleon players after malicious Workshop maps spread malware. Learn what happened, who is affected, and ...

Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but ...

CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every ...

And the second was related to a mini-project I’d been thinking about anyway but started actively working on because of that ...

ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...

Many users first register a messaging app on an Android phone and only later install the Windows version. That sequence is ...

Attackers were found using a Lua-based malware loader posing as a TrueType font tile, with layered obfuscation and fileless ...

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that ...

Microsoft's July 2026 Patch Tuesday fixed 570 security vulnerabilities, pushing the monthly total past 620 and to a new ...