North Korean hacking group APT37 was seen deploying new implants, backdoors, and other tools in attacks targeting air-gapped ...

The Sophia Script is an open-source PowerShell module designed to debloat and fine-tune Windows 11 (and Windows 10 ). It is ...

North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance.

North Korea-linked ScarCruft’s Ruby Jumper uses Zoho WorkDrive C2 and USB malware to breach air-gapped systems for ...

IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...

Changing the region to “English (World)” during Windows 11 setup can prevent unnecessary third-party apps from appearing in the Start menu. For advanced users, a PowerShell script can remove even more ...

ClickFix campaigns have adapted to the latest defenses with a new technique to trick users into infecting their own machines with malware.

Say goodbye to repetitive tasks forever with this surprising Windows feature.

Chrome and Edge users warned about NexShield browser extension scam that causes crashes and tricks users into installing ...

Comedian Jon Stewart ripped the Republican response to President Donald Trump sharing a racist video on his Truth Social account last week. He compared MAGA supporters’ outrage over Bad Bunny’s Super ...

PowerShell cross-platform limitations break Windows-only cmdlets, .NET dependencies, and Windows Forms GUIs on Linux. Dual booting and WinBoat enable Windows PowerShell compatibility but introduce ...