PowerShell Executable Script

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

FortiClient EMS flaw CVE-2026-35616 enabled malware delivery via fake updates, risking credential theft across endpoints.

The PureLogs module targeted a wide range of browsers, including Google Chrome, Microsoft Edge, Brave, Opera, Yandex Browser, ...

5 日

macOSではアプリに公証取得を義務付けており、違反すると「Gatekeeper」の機能により「未確認の開発者」という警告が表示される。Appleから公証をうけていない従来の「PowerShell」もこの例外ではなく、利用の際はターミナルで「xatt ...

4 日

Threat actors are targeting systems with high-performance computers in an ongoing cryptojacking campaign spread through a ...

Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by ...

Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with ...

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

EchoCreep, which uses Discord for C&C communication, and GraphWorm, which uses Microsoft Graph API for the same purpose. The ...

一部の結果でアクセス不可の可能性があるため、非表示になっています。