Security Boulevard

Mapping detections and controls to MITRE ATT&CK

For many UK SMEs, the hardest part of defensive security is not collecting more tools. It is understanding whether the controls and detections already in place actually cover the behaviours an ...
Security Boulevard

SloppyRAT: A New Tool For Ransomware Attacks

IntroductionIn June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being ...
Morning Overview on MSN

5,400 hacked sites now show a fake CAPTCHA that talks visitors into infecting their own PC

More than 5,400 websites have been quietly compromised and turned into delivery points for a scam that convinces visitors to ...
Arabian Post

Hackers exploit CAPTCHA, WebDAV and blockchain to steal credentials

Cybercriminals are combining fake Google CAPTCHA prompts WebDAV-hosted DLLs malicious Cloudflare Workers and BNB Smart Chain contracts in a multi-stage ...

Microsoft warns fake CAPTCHA is tricking Windows users into running malware

The pages impersonate Cloudflare and other trusted services. Instead of presenting a normal CAPTCHA challenge, they instruct users to open PowerShell or Command Prompt and paste ...
Microsoft

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...
Dark Reading

ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain

The campaign uses EtherHiding to dynamically update its command-and-control server, using the blockchain as an ...
ETV Bharat

Microsoft Warns Of New TerminalFix Attack Using Fake CAPTCHAs To Hack Windows Systems

Microsoft has uncovered a new cyberattack called TerminalFix, which uses fake CAPTCHA pages to trick users into installing ...
HackerNoon

A Single Canadian Tax Lure Spread into a 46-Country, US-First RMM Campaign

ANY.RUN uncovers a 46-country phishing campaign using fake tax documents, Vercel infrastructure, and legitimate RMM software ...
Hackread

Microsoft Warns of TerminalFix Campaign Hiding Malware in PNG Images

TerminalFix uses fake Cloudflare CAPTCHA pages to trick users into running PowerShell malware, creating reverse tunnels that provide access to internal systems.
GitHub

README.md

YottaMeta's zero-dependency security log analysis & detection engine: login brute-force · Web attack scanning · suspicious PowerShell script blocks, implemented with the pure Python 3.8+ standard ...
GitHub

Windows DFIR Lab 60 — Deleted Script Recovery Investigation

This lab investigates how a deleted PowerShell script can still leave behind useful forensic evidence after the script itself has been removed from the filesystem. A harmless PowerShell script was ...