Microsoft has disabled a Windows app installer protocol misused by hackers to spread malware. The compromise exploited system vulnerabilities, avoided anti-malware software, and delivered packages through malicious advertisements for popular software. Fraudulent software such as Zoom, Tableau, and AnyDesk were circulated using search engine optimisation poisoning to trick users into downloading malware. Microsoft advises users to be vigilant and only download software from official websites.

Chinese Hackers Target European Diplomats with Malware
MirrorFace, a threat actor tied to Chinese cyberespionage, has expanded its activity outside East Asia, targeting a European organization with updated hacking tools. Researchers from