Endpoint Security
Windows now displays in the properties tab of LNK files critical information that could reveal malicious code.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Windows"
Artificial Intelligence
Without proper security controls, AI agents could perform malicious actions, such as data exfiltration and malware installation.
Vulnerabilities
Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products.
Malware & Threats
The Windows shortcut vulnerability has been seen in attacks conducted by Mustang Panda to drop the PlugX malware.
Vulnerabilities
CVE-2025-59287 allows a remote, unauthenticated attacker to execute arbitrary code and a PoC exploit is available.
Endpoint Security
In files downloaded from the internet, HTML tags referencing external paths could be used to leak NTLM hashes during file previews.
Vulnerabilities
Leading to code execution, authentication bypass, and privilege escalation, the flaws were added to CISA’s KEV list.
Endpoint Security
Users can continue receiving important security updates for Windows 10 by enrolling in the ESU program.
Endpoint Security
After more than 40 years of being set against a very recognizable blue, the updated error message will soon be displayed across a black...
Endpoint Security
Microsoft is preparing a private preview of new Windows endpoint security platform capabilities to help antimalware vendors create solutions that run outside the kernel.
Endpoint Security
With end of support scheduled for October 2025, Windows 10 users will be able to continue receiving important security updates.
Vulnerabilities
A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.
Vulnerabilities
Microsoft on Tuesday patched a zero-day vulnerability in the Windows Win32 kernel that has been exploited since March 2023.
Vulnerabilities
ClearSky Cyber Security says it has seen a new Windows zero-day being exploited by a Chinese APT named Mustang Panda.
Vulnerabilities
Proof-of-concept (PoC) code was published for CVE-2024-49113, a denial-of-service (DoS) vulnerability in Windows LDAP.
Vulnerabilities
CISA has warned organizations that two vulnerabilities affecting Adobe ColdFusion and Windows have been exploited in the wild.
Nation-State
The Russia-linked RomCom APT has been observed chaining two zero-days in Firefox and Windows for backdoor delivery.
Vulnerabilities
The exploit for a new zero-day vulnerability in Windows is executed by deleting files, drag-and-dropping them, or right clicking on them.
Vulnerabilities
Microsoft has rolled out mitigations for recently disclosed downgrade attacks targeting the Windows Update process.
Endpoint Security
SecurityWeek talked to David Weston, VP enterprise and OS security at Microsoft, to discuss Windows kernel access and safe deployment practices.
Vulnerabilities
AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybersecurity Funding
Malware & Threats
Artificial Intelligence
