Endpoint Security
The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Windows"
Vulnerabilities
Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM.
Endpoint Security
The exploitation is mitigated by preventing the FsTx Auto Recovery Utility from starting when the WinRE image launches.
Endpoint Security
Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and persistent malware through phishing, fake software downloads, and LOLBIN-based attack...
Vulnerabilities
The researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug.
Vulnerabilities
YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System.
Vulnerabilities
Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence.
Vulnerabilities
A fake RPC server can be used to listen for RPC requests and impersonate the target service to elevate privileges to System.
Vulnerabilities
The initial vulnerability was exploited by Russia-linked APT28 in attacks against Ukraine and EU countries.
Vulnerabilities
The security defects allow attackers to escalate privileges and execute arbitrary code remotely.
Endpoint Security
Windows will have runtime safeguards enabled by default, ensuring that only properly signed software runs.
Endpoint Security
After a decade and a half of service, the current certificates will expire, and new ones will be rolled out.
Vulnerabilities
Microsoft’s Patch Tuesday updates fix roughly 60 vulnerabilities found in the company’s products.
Identity & Access
The next major Windows Server and Windows releases will have the deprecated authentication protocol disabled by default.
Vulnerabilities
Two vulnerabilities patched this month by Microsoft were disclosed publicly before fixes were released.
Vulnerabilities
Microsoft has addressed a Windows vulnerability exploited as zero-day that allows attackers to obtain System privileges.
Endpoint Security
Windows now displays in the properties tab of LNK files critical information that could reveal malicious code.
Artificial Intelligence
Without proper security controls, AI agents could perform malicious actions, such as data exfiltration and malware installation.
Vulnerabilities
Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products.
Malware & Threats
The Windows shortcut vulnerability has been seen in attacks conducted by Mustang Panda to drop the PlugX malware.
ICS/OT
The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.
Incident Response
Vulnerabilities
Artificial Intelligence
Anthropic takes Fable 5 and Mythos 5 offline to comply with a directive from the Trump administration to prevent use by foreign nationals.
Management & Strategy
Artificial Intelligence
Vulnerabilities
Vulnerabilities
