ReliaQuest observed attackers pairing ClickFix with the PySoxy proxy tool to establish redundant encrypted access paths and persistence on compromised systems. ClickFix, a one-shot social engineering ...

My new favorite Windows app made my PC safer and more reliable - and it's free ...

Do you want to start using Python but are stuck on setting up the environment? Many people think, "I want to automate tasks with Python," but get stuck on the initial environment setup and give up. In ...

description: The following analytic detects the execution of PowerShell scripts containing Base64 encoded content, specifically identifying the use of `FromBase64String`. It leverages PowerShell ...

description: The following analytic identifies suspicious PowerShell execution using Script Block Logging (EventCode 4104). It leverages specific patterns and keywords within the ScriptBlockText field ...

Microsoft is turning Windows 11 into agent-native at Build 2026, adding local AI models and OS-level security to fix its ...

TL;DR Introduction At the start of this year, I wrote a blog on how 2025 was the ‘year of the infostealer’, and it doesn’t ...

Cybersecurity roundup: supply chain threats, AI agent risks, browser-cloning malware, mule networks, endpoint bypasses, and ...

Microsoft’s aging “mshta.exe” utility, a leftover component from Internet Explorer, is still being actively abused in modern malware campaigns years after the browser itself was retired. According to ...

Microsoft unveiled a series of major AI-focused announcements at its Build 2026 developer conference, including the new ...