安全研究人员观察到Mistic与ModeloRAT（一种基于Python的远程访问木马）协同运作，后者与代号Woodgnat（公开名KongTuke）的金融动机黑客组织存在关联。 隐蔽性极强的内存驻留后门 自2026年4月起，一种名为Mistic的新型Windows后门程序在企业网络中悄然扩散。该恶意软件通过完全在内存中执行载荷的方式实现持久化访问，不向硬盘写入任何恶意文件，使得传统依赖磁盘文件扫 ...

Windows Experience Index (WEI) is a tool that measures your Windows computer’s capabilities based on the CPU, RAM, graphics, and hard disk performance. This guide will cover all the available methods ...

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

Security tooling is not written in a single language. Python powers most automation. C sits at the exploit layer. PowerShell ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

Researchers from Zscaler found a new malware campaign dubbed Edgecution.

Microsoft is delivering tools to quickly configure Windows PCs as workstations for Windows and Linux development.

A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter ...