Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor.

Unwitting victims are now being tricked into installing malware via Windows Terminal, but some experts say this is old news.

The Sophia Script is an open-source PowerShell module designed to debloat and fine-tune Windows 11 (and Windows 10). It is ...

IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...

PowerShell modules allow you to combine multiple scripts to simplify code management. Learn step-by-step instructions for creating and using these modules.

While software can sync files and folders for you, it's often limited in scope. Learn how a PowerShell script can help you ...

"Saturday Night Live" is closing out 2025 with a holiday message from President Donald Trump. The cold open of the final "SNL" episode of the year featured James Austin Johnson as Trump delivering a ...

PS2EXE installs through the PowerShell Gallery, so you can set it up quickly. Open Windows Terminal or PowerShell as administrator. Run the module installation command: Install-Module -Name PS2EXE ...

President Trump (James Austin Johnson) and White House Press Secretary Karoline Leavitt (Ashley Padilla) faced a tough line of questioning in tonight’s “Saturday Night Live” cold open. While Padilla’s ...

Year after year, LNK files are exploited in malware attacks, mainly because a core vulnerability hides malicious content from users. Microsoft has not yet fixed the flaw, so we must be cautious when ...