Fake CAPTCHA Scam Tricks Windows Users Into Installing Malware

A fake CAPTCHA scam is tricking Windows users into running PowerShell commands that install StealC malware and steal passwords, crypto wallets, and more.
Windows Report

Windows 11 Canary Build KB5077221 Adds Built-In Sysmon

Windows 11 KB5077221 arrives in the Canary Channel with built-in Sysmon support and updated sharing features for Insiders.
The Hacker News

CRESCENTHARVEST Campaign Targets Iran Protest Supporters With RAT Malware

CRESCENTHARVEST uses protest lures and malicious LNK files to deploy RAT malware targeting Iran protest supporters for ...
MUO on MSN

I finally removed every trace of Copilot and Recall from Windows — here's how

Removing these AI features from Windows isn't as hard as you may think.

CAPTCHA or trap? Windows users tricked into installing malware on their PCs

StealC malware campaign exploits fake CAPTCHA pages to steal sensitive data while blending into normal system activity.

De-Enshittify an Existing Install of Windows 11 ⭐

If you want to de-enshittify Windows 11 but find starting over from scratch to be daunting, then this is for you.
Computing

Employee monitoring tools exploited to access corporate networks

A ransomware group has been using legitimate employee monitoring and remote support software to infiltrate corporate systems, according to new research.
CyberGuy

Fake ad blocker breaks PCs in new malware extension scam

A fake ad-blocking browser extension is deliberately crashing Chrome and Edge to trick users into running malware on their own PCs.

Here is how Microsoft is improving PowerShell and Windows OpenSSH in 2026Here is how Microsoft is improving PowerShell and Windows OpenSSH in 2026Here is how Microsoft is ...

Microsoft is gearing up for big PowerShell and Windows OpenSSH changes in 2026, but security will come before flashy new features.

New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS

Threat actors are now abusing DNS queries as part of ClickFix social engineering attacks to deliver malware, making this the first known use of DNS as a channel in these campaigns.

Microsoft: Critical Windows Admin Center Flaw Allows Privilege Escalation

A high-severity Windows Admin Center vulnerability (CVE-2026-26119) could allow privilege escalation in enterprise ...

February’s Patch Tuesday release fixes 59 flaws, including 6 being exploited

IT admins will be busy this month patching Microsoft software and apps, but not nearly as busy as they were in January.