Latest cybersecurity reporting from selected sources.

Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network

Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2

LNK files use GitHub C2, embedded decoders and PowerShell for persistence and data exfiltration

A multi-stage attack delivered via USB devices has been observed installing cryptomining malware using DLL hijacking and PowerShell

An ongoing malware campaign has been observed using malvertising to deliver PS1Bot, a PowerShell-based framework

Attackers are exploiting user familiarity with CAPTCHAs to distribute the Lumma Stealer RAT via malicious PowerShell commands, according to HP

TA453, also known as Charming Kitten, launched a targeted phishing attack using PowerShell malware BlackSmith

Walmart detailed findings about an unknown PowerShell backdoor, which was potentially utilized alongside a new Zloader variant

Proofpoint said it is the first time this threat actor has been seen using LLM-generated PowerShell scripts

Adlumin said the malware combines elements of off-the-shelf threats and APT tactics