4月14日消息，网络安全公司 Malwarebytes 披露，一个高仿微软支持网站的钓鱼页面正在传播恶意 Windows 更新。攻击者注册易混淆域名并复制微软官方 UI 配色，伪造知识库编号诱导用户下载 83MB 的安装包。 该安装包采用 WiX Toolset 构建，部署了一个基于 Electron 的套壳 Chromium 浏览器应用，成功绕过数十款安全引擎检测。用户执行安装后，Visual ...

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

This week in cybersecurity: 338 new CVEs published including 11 critical severity. 9 vulnerabilities added to CISA KEV catalog. Plus major developments in AI security, supply chain attacks, and ...