Endpoint Security
Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security products.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Windows"
Endpoint Security
The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode.
Vulnerabilities
Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM.
Endpoint Security
The exploitation is mitigated by preventing the FsTx Auto Recovery Utility from starting when the WinRE image launches.
Endpoint Security
Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and persistent malware through phishing, fake software downloads, and LOLBIN-based attack...
Vulnerabilities
The researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug.
Vulnerabilities
YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System.
Vulnerabilities
Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence.
Vulnerabilities
A fake RPC server can be used to listen for RPC requests and impersonate the target service to elevate privileges to System.
Vulnerabilities
The initial vulnerability was exploited by Russia-linked APT28 in attacks against Ukraine and EU countries.
Vulnerabilities
The security defects allow attackers to escalate privileges and execute arbitrary code remotely.
Endpoint Security
Windows will have runtime safeguards enabled by default, ensuring that only properly signed software runs.
Endpoint Security
After a decade and a half of service, the current certificates will expire, and new ones will be rolled out.
Vulnerabilities
Microsoft’s Patch Tuesday updates fix roughly 60 vulnerabilities found in the company’s products.
Identity & Access
The next major Windows Server and Windows releases will have the deprecated authentication protocol disabled by default.
Vulnerabilities
Two vulnerabilities patched this month by Microsoft were disclosed publicly before fixes were released.
Vulnerabilities
Microsoft has addressed a Windows vulnerability exploited as zero-day that allows attackers to obtain System privileges.
Endpoint Security
Windows now displays in the properties tab of LNK files critical information that could reveal malicious code.
Artificial Intelligence
Without proper security controls, AI agents could perform malicious actions, such as data exfiltration and malware installation.
Vulnerabilities
Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products.
Identity & Access
The deal extends Okta's reach beyond identity management and into the realm of security operations, positioning the company to compete more directly on identity...
Vulnerabilities
Vulnerabilities
Artificial Intelligence
Endpoint Security
Artificial Intelligence
ICS/OT
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems.
Artificial Intelligence
Cybersecurity Funding
Cybersecurity Funding
Cybersecurity Funding
