Unwitting victims are now being tricked into installing malware via Windows Terminal, but some experts say this is old news.

North Korea-linked ScarCruft’s Ruby Jumper uses Zoho WorkDrive C2 and USB malware to breach air-gapped systems for ...

IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...

In ClickFix attacks, victims are supposed to execute commands themselves to infect their systems. One campaign relies on Windows Terminal.

VOID#GEIST malware campaign delivers XWorm, AsyncRAT, and Xeno RAT using batch scripts, Python loaders, and explorer.exe ...

If your PC is your only backup, at least make it corruption-proof—here's how ...

Microsoft warns of a campaign on chat platforms where attackers slip malware to victims as supposed gaming tools.

The Windows release follows the earlier launch of the Codex desktop app for macOS, which OpenAI says was downloaded more than one million times in its first week ...

North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance.

North Korean hacking group APT37 was seen deploying new implants, backdoors, and other tools in attacks targeting air-gapped ...

OpenAI launches its native Codex app for Windows, tailored for agentic coding with PowerShell integration and robust sandboxing, available via Microsoft Store.