Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other ...

A legacy Windows scripting utility tied to Internet Explorer is still being used in modern malware campaigns, researchers say ...

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

Cross-platform installer for Triton and SageAttention on ComfyUI. Simplifies GPU-accelerated inference setup for Windows users with automated dependency management and RTX 5090 support. Installing ...

OpenAI has published a technical explanation of its Windows sandbox for Codex, detailing a stricter local setup for the coding agent on developer PCs. Codex can still read broadly across a system, ...

2026年5月初，全球数百万用户信赖的知名开源下载管理器 JDownloader 遭遇严重供应链攻击。攻击者暗中入侵了官方网站 jdownloader.org，将正版安装程序下载链接替换为携带全功能 Python ...

According to its GitHub documentation, RTK is built entirely in Python and avoids any APIs or exploits, ensuring that "all ...

Windows 端投递的是经过混淆的 Python RAT；Linux 端则通过被污染的 shell 安装脚本落地 SUID-root 后门，并以 upowerd 名义伪装驻留 ...

Weekly cybersecurity recap covering zero-days, malware, phishing, supply chain attacks, cloud threats, AI security risks, and ...

Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.

高级持续性威胁（APT）组织长期以政企机构、关键信息基础设施为核心目标，依托社会工程学与模块化恶意载荷实施精准入侵。其中，假冒官方机构的钓鱼攻击因信任度高、诱导性强、处置成本低，成为 APT 组织获取初始访问权的主流手段。2026 年 5 ...