Password-protected files are an intelligent way in which attackers are working to evade enterprise security defenses and infect endpoints. Not long ago, phishing attacks were nearly always delivered ...

The security industry has been highlighting the cybercriminal misuse of HTML for years — and evidence suggests it remains a successful and popular attack tool. Last year we reported that around one-in ...

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with malware hidden inside dependency folders. The malicious activity was ...

Cybersecurity researchers have identified a new malware campaign that is reportedly targeting WhatsApp users through dangerous file attachments. The threat is raising concerns among security experts ...

Japan's computer emergency response team (JPCERT) is sharing a new 'MalDoc in PDF' attack detected in July 2023 that bypasses detection by embedding malicious Word files into PDFs. The file sampled by ...

UPDATE: Google’s spokesperson reached out with an update for this. This is what he said: “Based on our current detection, no apps containing this malware are found on Google Play. Android users have ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. As if Windows users need any more bad news on the security ...

Threat actors are increasingly creating malicious virtual hard drives to distribute malware, in the hopes of getting around email gateways that have become good at detecting infected documents, ...