Monday opens with a trust problem. A mail server flaw is under active use. A network control system was targeted. Trusted packages were poisoned. A fake model page pushed a stealer. Then came the ...

Iron Software builds trusted .NET libraries for document automation. NPOI is the most-downloaded free Excel library for .NET. The NuGet package has over 100 million downloads, it appears in countless ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Erik Steiger discusses the operational pain ...

Self-hosted WeChat API bridge using WeChatFerry + Docker. Designed for international WeChat accounts that are blocked from WeChat's web protocol. If you're an international user, you'll get "该微信账号不支持 ...

December 2025 was a brutal reality check for security teams. While most were winding down for the holidays, threat actors weaponized a tectonic shift in the landscape, headlined by the “React2Shell” ...

UPDATE (June 5 th, 2025): Since publishing this blogpost, we have updated our tracking to better reflect the full range and complexity of the malicious activities carried out by the OilRig APT group.

ESET researchers have analyzed MQsTTang, a new custom backdoor that we attribute to the Mustang Panda APT group. This backdoor is part of an ongoing campaign that we can trace back to early January ...

Microsoft 365 Defender is becoming Microsoft Defender XDR. Learn more. UPDATE: Microsoft continues to work with partners and customers to expand our knowledge of the threat actor behind the ...