GReAT

A GReAT study has identified ~250,000 potential security issues in publicly accessible GitHub Actions.

Looking for a hentai game, but ended up with malware? Attackers are hiding the Argamal remote access Trojan inside hentai games, and distributing it through dedicated websites and torrent trackers. We break down how this malware works, why it’s dangerous, and how to keep your computer from becoming a goldmine for blackmailers.

Our experts took a road trip through Mexico ahead of the World Cup to test whether it’s safe to connect to public Wi-Fi access points in major cities.

The new CrystalX remote access Trojan looks like the prank viruses of the 90s on the surface, but it causes a lot more damage. It spies on all that’s happening on your computer, steals cryptocurrency and accounts, and gives the attacker full control over your device. We break down how it works, and how to avoid becoming a victim.

We break down the BeatBanker trojan attack, which combines espionage, crypto theft, and mining with inventive ways to dig its heels into a smartphone.

An in-depth analysis of CVE-2026-3102, a vulnerability posing a potential threat to anyone processing images on a Mac.

Our experts at GReAT have uncovered a dangerous vulnerability in a smart-home control app that allowed attackers to disable physical security systems.

Our technologies have helped to detect the zero-day vulnerability CVE-2025-2783 in Google Chrome, which was used in a sophisticated APT attack.

Cybercriminals are blackmailing YouTube bloggers into posting malware links in their video descriptions.

We discovered over 200 repositories with fake projects on GitHub. Using them, attackers distribute stealers, clippers, and backdoors.

Just a few hours before 2025, we recorded a surge in cryptominer distribution through video games. Interestingly, not only home PCs but also corporate machines were affected.

Attackers are pumping out fake wedding invitations containing malicious APKs to Android users. To find out how to guard against this new threat, read on.

Malicious packages for AI integration containing infostealer malware were found in the Python Package Index repository.

Security should be multilayered, and use of allowlists is appropriate as one of the security levels.