Vulnerabilities
Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Windows"
Vulnerabilities
Dropped on Patch Tuesday, the exploit allows any user to spawn a shell with System privileges.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Endpoint Security
Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security products.
Endpoint Security
The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode.
Vulnerabilities
Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM.
Endpoint Security
The exploitation is mitigated by preventing the FsTx Auto Recovery Utility from starting when the WinRE image launches.
Endpoint Security
Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and persistent malware through phishing, fake software downloads, and LOLBIN-based attack...
Vulnerabilities
The researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug.
Vulnerabilities
YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System.
Vulnerabilities
Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence.
Vulnerabilities
A fake RPC server can be used to listen for RPC requests and impersonate the target service to elevate privileges to System.
Vulnerabilities
The initial vulnerability was exploited by Russia-linked APT28 in attacks against Ukraine and EU countries.
Vulnerabilities
The security defects allow attackers to escalate privileges and execute arbitrary code remotely.
Endpoint Security
Windows will have runtime safeguards enabled by default, ensuring that only properly signed software runs.
Endpoint Security
After a decade and a half of service, the current certificates will expire, and new ones will be rolled out.
Vulnerabilities
Microsoft’s Patch Tuesday updates fix roughly 60 vulnerabilities found in the company’s products.
Identity & Access
The next major Windows Server and Windows releases will have the deprecated authentication protocol disabled by default.
Vulnerabilities
Two vulnerabilities patched this month by Microsoft were disclosed publicly before fixes were released.
Vulnerabilities
Microsoft has addressed a Windows vulnerability exploited as zero-day that allows attackers to obtain System privileges.
Email Security
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Data Breaches
Artificial Intelligence
Artificial Intelligence
