powershell.exe

• From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities

  From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with malicious sites also surfaced through AI

• Hypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting

  Hypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting Learn how Cisco Talos Threat Hunting uses hypothesis-driven methods and multi-domain telemetry correlation to find stealthy threats operating below automated detection thresholds. By Ron Scott-Adams Mo

• Webworm: New burrowing techniques

  Webworm: New burrowing techniques ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal Webworm: New burrowing techniques Award-winning news, views, and insight from the ESET security community English Español Deutsch Portug

• deno-case-studies

  deno-case-studies Attack TTPs combine fileless execution, wide LOLBin use Categories: Threat Research Abuse of alternative runtime environments Deno-tes defender headaches | SOPHOS Skip to Content Open search Get started Experiencing a cyberattack? Get help now Sign in Sophos C

• ACR Stealer: Two observed intrusion chains amid increased threat activity

  ACR Stealer: Two observed intrusion chains amid increased threat activity From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environments. These campaigns are successfully using ClickFix lures to steal browse

• Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access

  Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in Europe and Asia. The campaign uses photo-themed ZIP archives

All reports →