AI-related SOC alerts rose 685% from February to June 2026, with 94.1% classified as noise and 5.8% as genuine security risks ...

Threat actors are actively abusing the legitimate Windows utility mshta.exe to execute malicious HTML Application (HTA) files ...

Microsoft invita gli amministratori a migrare da slmgr.vbs a PowerShell OSLicense prima della rimozione di VBScript. Ecco ...

IntroductionIn June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being ...

More than 5,400 websites have been quietly compromised and turned into delivery points for a scam that convinces visitors to ...

First phishing, then a fake captcha and a terminal command – this is how the cyberattack on Berlin proceeded, according to ...

Malicious ScreenConnect instances are used in worm-like attacks to deliver and execute payloads to newly connected clients.

Living-off-the-land binaries, often shortened to LOLBins, are legitimate Windows executables that attackers abuse to carry out malicious activity while blending in with normal administration. The ...

The pages impersonate Cloudflare and other trusted services. Instead of presenting a normal CAPTCHA challenge, they instruct users to open PowerShell or Command Prompt and paste ...

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

Microsoft Threat Intelligence identified a “TerminalFix” social engineering campaign designed to deploy a custom Python-based ...

Microsoft is warning that a campaign using fake human-verification prompts can turn a user's Windows computer into an entry point for attackers to reach an organization's internal network .