Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and persistent malware through phishing, fake software downloads, and LOLBIN-based ...

Bitdefender security researchers have discovered that attackers continue to exploit Microsoft HTML Application Host (MSHTA), a legacy utility available by default on Windows systems that can execute ...

Microsoft Defender Experts observed a campaign beginning in late February 2026 that uses WhatsApp messages to deliver malicious Visual Basic Script (VBS) files. Once executed, these scripts initiate a ...

Attack Surface Reduction is a feature of Windows Defender Exploit Guard that prevents actions that are used by exploit-seeking malware to infect computers. Windows Defender Exploit Guard is a new set ...

If you are setting up a new PC with Windows 11 version 24H2 (2024 Update) or later, developers may not find the VBScript installed after installation, as Microsoft does not install it by default now.

Google has released a report describing the novel ways in which malware has been using AI to adapt and evade detection. Google’s Threat Intelligence Group (GTIG) has seen several new and interesting ...

WTF?! It's an email scam as old as the Nigerian prince asking for money: someone claiming they hacked your webcam and have recorded you in an act of self-pleasure. Unless you pay up, the video will be ...

Microsoft has announced that starting later this month, ActiveX controls will be disabled by default in all Windows versions of Microsoft 365 and Office 2024 apps—including Word, Excel, PowerPoint, ...

Since October 2024, Microsoft Defender Experts (DEX) has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads that ultimately lead to ...

The attack targeted the military mission of a Western country in Ukraine, with the goal of deploying a PowerShell-based version of the GammaSteel infostealer. A cyberespionage group of Russian origin ...

Threat actors have used generative artificial intelligence (GenAI) to write malicious code in the wild to spread an open source remote access Trojan (RAT). It's one of the first observed examples of ...