CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.

How modern infostealers target macOS systems, leverage Python‑based stealers, and abuse trusted platforms and utilities to ...

At a time when browsers feel more cluttered than ever, a free tool called Just the Browser, developed by US journalist and ...

Consolidating these tools into one place was so useful, I should've done it sooner ...

Get your fresh install settled quickly with these 4 PowerShell scripts ...

DEAD#VAX campaign delivers AsyncRAT via IPFS-hosted VHD phishing files, using fileless memory injection and obfuscated ...

Two malware campaigns weaponize open-source software to target executives and cloud systems, combining social engineering ...

The modular Windows RAT uses in-memory execution and live operator control to maintain persistence and exfiltrate sensitive ...

A security audit found 341 malicious ClawHub skills abusing OpenClaw to spread Atomic Stealer and steal credentials on macOS ...

A new threat actor called Amaranth Dragon, linked to APT41 state-sponsored Chinese operations, exploited the CVE-2025-8088 ...

A self-hosted AI assistant that lives in your chat app, Clawdbot promises to do real work, but only if you’re willing to trust it with real access.

Malicious "skills" and persnickety configuration are just a few issues that security researchers have found when installing the OpenClaw AI assistant.