2+ hour, 58+ min ago   (365+ words) Cybersecurity researchers have uncovered a fake Minecraft optimisation mod that steals browser passwords, payment-card data, cookies, Discord information, and system details while giving attackers remote control over infected Windows PCs. The malicious Java Archive (JAR) pretends to be Lithium Extras…...

1+ week, 6+ day ago   (293+ words) McAfee WebAdvisor blocked more than 6,300 attempts to access WeedHack-linked sites during the past month. The activity shows that shutting down malware infrastructure does not necessarily stop a campaign when threat actors can rapidly rebuild distribution channels. The goal is to…...

2+ week, 5+ hour ago   (464+ words) Microsoft is investigating a Windows 11 compatibility issue that causes certain games to freeze, crash, generate access-violation errors, or unexpectedly restart affected PCs when RGB lighting drivers are installed. The issue has been associated with the August 11, 2026 Windows security update, KB5121003, released…...

1+ mon, 1+ day ago   (389+ words) A malicious campaign is targeting Roblox players with a fake “undetected” version of the Xeno script executor. Promoted through gaming forums and Discord communities, the installer appears to offer cheat features but instead delivers a Java-based information stealer and remote…...

1+ mon, 1+ day ago   (368+ words) Point Wild Threat Intelligence found that the malware uses layered packaging and obfuscation to make analysis more difficult and to delay detection. The sample examined was a 64-bit Windows executable built with PyInstaller, a tool commonly used to bundle Python…...

1+ mon, 3+ day ago   (448+ words) A malware campaign is targeting Roblox players with a fake version of the Xeno script executor, a tool commonly used to run custom Roblox scripts. The malicious package is advertised as an “undetected” Xeno build. It is distributed through gaming…...

3+ mon, 4+ day ago   (407+ words) Threat actors are increasingly turning to trusted platforms to hide their malicious infrastructure. In a campaign initially detected in July 2025, attackers began using comments on Steam Community profiles as command-and-control channels to distribute WordPress malware. Rather than hosting their own…...

3+ mon, 4+ week ago   (409+ words) The UK’s Online Safety Act aimed to revolutionize digital child protection when it came into effect in July 2025. However, nearly a year later, a new report from Internet Matters reveals that surprisingly low-tech methods can defeat these advanced age verification…...

6+ mon, 5+ day ago   (377+ words) The attackers tricked users into downloading and running fake tools disguised as legitimate files such as Xeno.exe or RobloxPlayerBeta.exe. These files were distributed through web browsers and chat platforms, making them appear safe and trustworthy. According to MsftSecIntel,…...

7+ mon, 2+ week ago   (237+ words) LastPass has issued a critical security alert regarding an active phishing campaign that commenced on January 19, 2026. The malicious actors are impersonating LastPass support staff and sending fraudulent emails claiming urgent vault backup requirements to harvest master passwords from unsuspecting users....