ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.

The issue spans regions, affecting viewers across multiple countries and triggering variants of the message, such as "content not available in your country." ...

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

Browsers make it easy to save payment info, but that convenience opens the door to malware, breaches, and data theft. We tell you what to do instead.