AD CS LOLBAS Toolkit Native Windows toolkit for AD CS enumeration and exploitation. Everything runs through built-in OS components (certreq.exe, certutil.exe, PowerShell AD module, .NET Framework) – no third-party tools needed(other than RSAT). Build...
Log Horizon connects to your Microsoft Sentinel workspace (and optionally Defender XDR), goes through every log table you’re ingesting, and tells you whether you’re getting security value from it or just burning money. It classifies...
In late December 2025, the architects of the renowned text editor EmEditor issued a formal advisory regarding the compromise of the application’s official distribution portal. Malefactors surreptitiously substituted the authentic installer with a deleterious...
Adversaries affiliated with the KongTuke threat collective have inaugurated a sophisticated malicious lineage dubbed CrashFix, specifically engineered to compromise Google Chrome users. According to findings from Huntress, the incursion commences with the procurement of...
After a protracted period of dormancy, the malevolent Gootloader has once again ascended to the forefront of the threat landscape. This resurgent campaign was meticulously documented last November by the Huntress team, who attributed...
Adversaries have orchestrated a sophisticated campaign utilizing a multi-stage infection vector to deploy the Remcos RAT, a remote administration tool designed to clandestinely subjugate compromised systems. Securonix researchers, who identified this offensive, have designated...
As Microsoft increasingly saturates Windows with artificial intelligence, a burgeoning faction of users and developers has transitioned from verbal dissent to coded resistance. A preeminent example of this defiance is a PowerShell script whose...
Notifications regarding Booking.com cancellations involving substantial financial transactions appear as mere routine for hospitality providers. Yet, such correspondence serves as the harbinger for a sophisticated malicious campaign tracked by Securonix researchers under the moniker...
In late December, an unwelcome supply-chain surprise erupted around the popular text editor EmEditor. According to the developer, between December 19 and 22, 2025, the download button on the official website may have served...
Cymulate Research Labs has uncovered a local privilege escalation vulnerability in Microsoft Windows Admin Center (WAC) version 2.4.2.1, affecting all WAC installations up to version 2411. The issue stems not from an obscure logic...